I think it's the only way to get as close as what your boss wants, which is slightly unreasonable, as other posters have noted that this would require physical access to the computer anyway and a jumper reset can clear all the BIOS passwords.Įncrypting the HDD at rest with BItlocker or 3rd party encryption is really the only way to prevent the data from being read when the OS isn't active (which also means that those 'forgotten files' are totally lost). This will lock out anyone from the BIOS to turn on USB boot support if they don't have the BIOS password. Turn off booting from anything other than the internal harddrive.

Set the password, set the requirement to always use the password to access the BIOS (it's in password bypass and admin set up lockout). In the BIOS security you set an admin password, but you didn't set the option to require the password to make changes or there would be an asterisk next to the BIOS Setup in your 3rd screenshot. I read that reason for this is because they have a microsoft certificate but even so is there a way to just disable or put a password on the USB/DVD drive boot? So when I turn on UEFI with secure boot on i can still load up my ubuntu without asking for a password. So I went to BIOS setting put in an administrator password and I tried turning off UEFI and Legacy on I disabled the USB/DVD drive leaving the HD active when I restart the PC it won't boot up saying this drive is unbootable. So I was ordered to put a lock or disable on USB/DVD bootable in BIOS. My boss came in and was surprised that I managed to get to it only to then be horrified that i can also go in to the files and folders that usually need higher Authority to access without putting any password. So i used my Ubuntu and made a bootable USB drive and booted the pc on my USB and mounted the hd to ubuntu to try and salvage any files that the employee forgot to put on to the shared drive.

One of our employees PC was acting up turns out was a bad sector in the hard drive tried to chkdsk but no luck. Hello I'm new into the field so please bare with me.

Win 10 boot dvd