I've noticed that some of our students have learned how to access recovery mode and boot from a USB to reinstall Windows, essentially turning the school devices into personal laptops. While we can disable recovery mode, we still find it useful for other tasks. I'm looking for a way to remove USB as a boot option in the recovery menu. Is there any method to do this effectively?
4 Answers
There's a workaround you could try: make sure you're using Intune to manage devices so they’re tied to your organization. This adds an extra layer of security since the devices would follow your policies.
You might want to check and change the boot sequence in the BIOS. Set it to only boot from the hard drive and make sure to password-protect the BIOS settings so that only authorized users can make changes.
If disabling USB boot in the BIOS is not an option for you, consider simply locking the BIOS configuration after you make those changes. It would prevent students from changing the settings again.
I also think it's worth discussing user agreements with the students. This kind of tampering with school property is not acceptable, and it could lead to more serious consequences if it continues.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures