I’ve used davido38’s suggestion re: cctk. I can even remove the pxe boot from the boot order. Now, any boot other than the HDD requires the BIOS password, but I can use psexec to set the next boot to pxe and then use psshutdown to reboot so the PCs can be imaged. Great work-around.