{"id":4769,"date":"2023-05-16T14:57:06","date_gmt":"2023-05-16T21:57:06","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4769"},"modified":"2023-05-16T14:57:07","modified_gmt":"2023-05-16T21:57:07","slug":"how-to-use-hp-connect-and-intune-to-update-bios","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4769","title":{"rendered":"How to Use HP Connect and Intune to Update BIOS"},"content":{"rendered":"\n

<\/p>\n\n\n\n

Keeping our devices up-to-date is important. We know all about Windows and applications, but often times miss out on keeping the other layers such as firmware and BIOS up-to-date as those are typically just updated during OSD or during troubleshooting.<\/p>\n\n\n\n

There are a few community-made solutions out there which are working really well and in this post we are going to have a look at a solution from HP called \u201cHP Connect for MEM\u201d.<\/p>\n\n\n\n

In short, \u201cHP Connect for MEM\u201d is utilizing Proactive Remediation to deploy a detection and remediation script. The detection script is used to identify each device\u2019s current BIOS-version and then use HP API to determine if there is any new version to apply. If there is a newer version the remediation script is used to download and apply the update. The end-user will receive a \u201cRestart Prompt\u201d to finalize the update.<\/p>\n\n\n\n

Pre-Requisites<\/h2>\n\n\n\n

As stated above, \u201cHP Connect for MEM\u201d is utilizing Proactive Remediation which requires Windows Enterprise, Windows 10\/11 Pro is not supported at this point.<\/p>\n\n\n\n

Windows 10\/11 Pro<\/td>Not supported<\/td><\/tr>
Windows 10\/11 Enterprise<\/td>Supported<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Windows Pro edition is not supported by proactive remediation<\/p>\n\n\n\n

Get started with HP Connect for MEM<\/h2>\n\n\n\n

The official user guide is found here. Use the guide to connect HP Connect with MEM.
Microsoft Word \u2013 HP Connect UG.docx<\/a><\/p>\n\n\n\n

Let\u2019s rock enroll! \ud83d\udd25<\/p>\n\n\n\n

Deploy a BIOS Update policy (dynamic Azure AD group)<\/h2>\n\n\n\n

Let\u2019s create a BIOS update policy. The first thing we need to do is decide whether we should deploy the policy to all HP models or to a specific one. In this demo I will update a HP EliteBook 850 G5 to latest BIOS version. As for now HP Connect for MEM does not support Filters natively, but we will look at how to use a Filter and change the assignment later on.<\/p>\n\n\n\n

  1. I created a dynamic Azure AD group with this query to make a group containing just my HP EliteBook 850 G5. (device.deviceModel -eq \"HP EliteBook 850 G5\")<\/em><\/code><\/li>
  2. Follow the getting started guide above to connect HP Connect to MEM<\/li>
  3. In HP Connect for MEM: Click Policies<\/em><\/li>
  4. Click: New Policy<\/em><\/li>
  5. Name: HP EliteBook 850 G5 BIOS update<\/em><\/li>
  6. Type: BIOS Update<\/em>
    \"\"<\/li>
  7. Click: Next<\/em><\/li>
  8. In this demo I will use \u201cKeep BIOS of all devices always updated\u201d but in production \u201cDeploy only critical BIOS updates\u201d would be a good use case (this is up to each company to decide).<\/li>
  9. At Select Device Group: Select the dynamic Azure AD group<\/em> we created in step 1\"\"<\/li>
  10. Click: Next<\/em><\/li>
  11. Review and click: Publish<\/em><\/li>
  12. Now what will happen is that HP Connect for MEM will create a Proactive Remediation for us with all settings needed (detection and remediation scripts)<\/li>
  13. Navigate to MEM <\/em>-> Reports <\/em>-> Endpoint analytics<\/em> -> Proactive remediations<\/em><\/li>
  14. You should see a new script package with %HPConnectForMEM% <\/em>as the name suffix<\/li>
  15. By reviewing the assignment we see that HP Connect defaults to \u201cRepeats every day<\/em>\u201d schedule. We can change that if we want to, but I do not recommend having the PR run more frequently than so.<\/li>
  16. Now all we need to do is wait for the PR to run on our device(s).<\/li>
  17. The end-user will get notified when a reboot is needed to finalize the BIOS update.\"\"<\/li><\/ol>\n\n\n\n

    Deploy a BIOS Update policy (virtual group and filter)<\/h2>\n\n\n\n

    Let\u2019s have a look at how to use a filter for a better assignment experience. Microsoft has recently released \u201cFilters\u201d as general available. Filters are very useful when it comes to pinpointing specific devices (such as a specific model) from an Azure AD-group.<\/p>\n\n\n\n

    1. Follow above steps to create your BIOS update policy in HP Connect for MEM<\/li>
    2. Create a Filter containing the model(s) you need. In this demo I use this query to create a Filter for HP EliteBook 850 G5. \"\"<\/li>
    3. At Select Device Groups: Select an empty device group<\/em> (group with no members)<\/li>
    4. Click next <\/em>and publish<\/em><\/li>
    5. Navigate to MEM <\/em>-> Reports <\/em>-> Endpoint analytics<\/em> -> Proactive remediations<\/em><\/li>
    6. Edit the newly created PR<\/li>
    7. Change the assignment to All devices<\/em> and include a Filter<\/em>\"\"<\/li>
    8. This is the only option for Filtering we currently have. Filters will hopefully be fully supported by HP Connect for MEM in close future<\/li><\/ol>\n\n\n\n

      Troubleshooting and logs<\/h2>\n\n\n\n

      The log HP Connect for MEM log files are located here:\u00a0%ProgramData%\\HP\\Endpoint\\Logs<\/em>
      The official UsergGuide covers the troubleshooting parts really well. Check it out! \ud83d\ude03      Microsoft Word \u2013 HP Connect UG.docx<\/a><\/p>\n\n\n\n

      Ref: https:\/\/www.rockenroll.tech\/2022\/02\/14\/use-hp-connect-and-mem-to-manage-bios\/<\/p>\n","protected":false},"excerpt":{"rendered":"

      Keeping our devices up-to-date is important. We know all about Windows and applications, but often times miss out on keeping the other layers such as firmware and BIOS up-to-date as those are typically just updated during OSD or during troubleshooting. There are a few community-made solutions out there which are working really well and in Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1185,1249,10],"tags":[1602,1603,1604],"class_list":["post-4769","post","type-post","status-publish","format-standard","hentry","category-autopilot-intune","category-azure-microsoft","category-microsoft","tag-hp-connect-and-intune-to-update-bios","tag-hp-connect-intune","tag-hp-connect-intune-bios"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t