Definitely keep them on UEFI - the systems will boot faster (almost not noticeable with the latest hardware) and are more secure. For example illegal boot "activation" kits that bypass Windows activation will not work for the same reason that most malware will not load - the antimalware service is running as the OS loads, and not afterwards.
For what seems like a year we've been deploying all Windows 7 devices with UEFI in place of legacy BIOS and the GPT partitions have helped with rootkits not infecting machines. Of course that doesn't help with bootkits wince SecureBoot is not available with Windows 7... that's one of the many reasons I've been waiting on being able to deploy Windows 8! ______________________________________________________ Haralambos “Harry” Mavromatidis | System Center Administrator Manhattan Associates, Inc. Direct +1 678.597.6545 Phone +1 770.955.7070 [email protected] http://www.manh.com ______________________________________________________ ________________________________________ From: [email protected] [[email protected]] On Behalf Of Michael Niehaus [[email protected]] Sent: Friday, September 13, 2013 22:44 To: [email protected] Subject: [mssms] RE: UEFI boot sccm 2007 + mdt 2010 MDT 2010 and ConfigMgr 2007 won’t handle UEFI. You would need to move to MDT 2012 Update 1 and/or ConfigMgr 2012 SP1 CU2 or above to get a good UEFI experience. Running Windows 7 using UEFI doesn’t really buy you much, although you may want to do it anyway if you want to later move to Windows 8 or 8.1 on those systems. Changing from non-UEFI to UEFI is a non-trivial exercise if you want to keep anything presently on the disk (e.g. user data). Thanks, -Michael From: [email protected] [mailto:[email protected]] On Behalf Of Tim Gross Sent: Saturday, September 14, 2013 10:03 AM To: '[email protected]' Subject: [mssms] UEFI boot sccm 2007 + mdt 2010 I have win7 deployments working for win7 via PXE but the new machines HP sent us are UEFI. I can change bios to legacy mode but figured I should start looking at UEFI. We’re a long way off from win8 and sccm2012 because of enterprise app dependencies ______________________________________________ The information contained in this email may contain legally privileged and confidential information and is only for the use of the individual named in the body of this email, the intended recipient, or Brown & Toland Physicians. Any dissemination, distribution, or copying of this document is strictly prohibited. If you have received this in error, please immediately notify the sender by replying to this message, and then delete all copies of it from your system. Thank you. ______________________________________________ ______________________________________________ The information contained in this email may contain legally privileged and confidential information and is only for the use of the individual named in the body of this email, the intended recipient, or Brown & Toland Physicians. Any dissemination, distribution, or copying of this document is strictly prohibited. If you have received this in error, please immediately notify the sender by replying to this message, and then delete all copies of it from your system. Thank you. _______________________________________________
