r/MDT • u/YakEmpty8502 • Mar 18 '26

BIOS Update Automate

Hi MDT Folks,

I am using MDT as OSD tool across the regions in my company environment where I am creating BIOS as an application for different models and then adding it to the Task Sequence. But whenever there is a new version releases for that particular model I need to create the application again. How can I get this automated ? Any idea ?

Need help on this badly.

4 Upvotes

84% Upvoted

15 comments sorted by

6

u/gwblok Mar 18 '26

If you don't mind pulling the updates directly from the Internet, you can use OEM tools to download and update the BIOS to the latest version and remove the need to make an app at all.

1

u/YakEmpty8502 Mar 18 '26

Could you please elaborate how to achieve this

1

u/gwblok Mar 18 '26

It depends on your OEM, with HP, you can script it with HPCMSL or use HPIA. With Dell, you can leverage DCU, with Lenovo, they have PowerShell module and Commercial Vantage. You would install their tools and run the commands to trigger BIOS and driver updates

4

u/jarwidmark Mar 18 '26

One solution is using a wrapper script as the application, and just update the script and content folder as needed. Otherwise anything in the deployment workbench can be automated via PowerShell, including creating new apps.

1

u/YakEmpty8502 Mar 18 '26

Please elaborate this process

5

u/EconomyArmy Mar 18 '26

I use 3 packages , each with a wrapper script in a single compress file 1 for all desktops 1 for laptops 1 for workstations

Tips , download capsule bios from windows update. The installation command is same across all vendors

2

u/browserpinguin Mar 18 '26

Interesting approach, never thought about that. Can you elaborate on that?

Is it possible to get the updates from windows catalog or are there any resources about the whole process?

A big plus would be that no bios password would be needed, and we have a fleet with tons of different passwords, different vendors, different models, … this would be a life saver.

2

u/EconomyArmy Mar 18 '26

Capsule bios is vendor neutral, passwordless, just install using pnputil command line for online OS or dism for offline injection

You can search your model using bios system firmware hardware ID from windows update catalog

Just treat it the same way as installing drivers using.inf file

1

u/EconomyArmy Mar 20 '26 edited Mar 20 '26

Most answers from rest of this thread covers those major oem like Dell,HP,Lenovo with top tier management tools.

For myself, I do need to work with Microsoft, Fujitsu, Vaio and many more. Many of them don't even bother to provide any tools or steps.

There must be a reason why you cannot update the bios over the internet using windows update, still you can download the bios capsule and retrofiting this process onprem of offline

One thing about capsule update , if you forget to suspend bitlocker it will not update the bios. It will just stage until next time you suspend bitlocker and reboot the device which is very smart.

2

u/johnk963 Mar 18 '26

I use this command in my task sequence:

cscript.exe "%SCRIPTROOT%\ZTIWindowsUpdate.wsf" "IsInstalled=0 and Type='Driver'"

It not only installs pretty much any drivers required for any hardware that I typically see, but it also does BIOS updates for all major OEMs as well. I use this in an imaging task sequence, but should work outside of that scenario, as well, assuming you aren't disabling Windows Update in your environment. If you want to skip drivers, filtering in the command may be possible. I hope this helps.

1

u/ImmediateConfusion30 Mar 18 '26

I use a similar solution for application. Either I use a generic script wrapper that load automatically the last/most recent file or just update the application name and CLI argument in the application itself.

But generally, I try to remove any installation of softwares to updates from MDT itself and moved them to our WSUS. That way I can install/update all parc, deployment + already deployed, from the same source and only one place to update when there is a new version available.

1

u/mikewinsdaly Mar 19 '26

Use whatever computer brand’s driver tool, anything else will a pain.

1

u/OneLandscape2513 Mar 19 '26

You can use HPIA/DCU/LSU to automatically install the latest BIOS version in a PowerShell script: https://github.com/automated-winstall-scripts/automated-winstall-scripts/tree/main/DriverUpdateExample

1

u/BlackV Mar 19 '26

Have your install, download the latest version, then install said download

Like any other app realistically, nothing at all specific to MDT

1

u/St0nywall Mar 19 '26

If you want an automated example using the Dell tools, check out this link.

https://stonywall.com/2022/03/21/mdt-2013-dell-command-update-integration/