I use SCCM 2016 and in a Task Sequence after Disk Partitioning I call a Package and execute an INI file in the context of the package. It won't save the settings change I want to make for SECURE BOOT. I have not had any success for months on certain desktop models using Version 1.25 of the tool, so I downloaded Ver 1.28 which is a November 2019 release. The situation seems to be the same in V 1.28 I am trying to make this settings change on the following models M79, M800, M910t and M715s and most importantly the M79 where I have over 1800 units. With experimentation I can say that the INI file DOES work when I want to change and save settings for "OS Optimized Defaults","BootPriority","QuickBoot","BootMode" and "CSM" but it just wont save the change on the line that says "Secure Boot,Enabled". I've copied the utility (both versions) down locally to a PC and run the command line option but upon reboot the setting in the BIOS still shows Secure Boot as Disabled. I've run the GUI for ThinkBIOSConfig.hta (again both versions) and changed the drop down to Enabled - it goes RED - I've saved the changes and it tells me it has been successful in saving the changes but on reboot the BIOS still shows Secure Boot as Disabled. I've also used Powershell commands and something similar there too, announcing success but no change on reboot. The particular M79 machine I am trying it on now is BIOS Version MOLKT12AUS 1.12 of June 2016. I am beginning to suspect that ThinkBIOSConfig is for laptops only (ThinkPads) and is not meant for Desktops - am I correct ??? and can anyone tell me how to automate the change of the Secure Boot setting. If I am in front of the machine and in the BIOS (for the 4 models mentioned) I can change the setting manually and after a reboot I can see it saved - but I cant do it in the tools! Help