Windows 10
-
There’s still no reason to believe that an OEM who wants to still be relevant to enterprise would force secure boot.
-
No reason to believe, but the fact that it’s there means headaches for us, and potentially all imaging solutions besides MDT/WDS paired.
-
OSX is designed to only run on Mac hardware (even though it’s been broken)…
How about when the entire smart phone industry tried vehemently to prevent jail breaking and rooting, till federal regulators said they shouldn’t… [url]http://www.wired.com/2010/07/feds-ok-iphone-jailbreaking/[/url]
I don’t think some manufacturers care, and it’s quite possible that there would be a demand for machines that DO have secure boot irreversibly in place… Think about finance systems, bank systems, heck - even small business owners… that want to make SURE nobody can just load up a live-Linux CD and access their files, or boot from some live-flash drive…
How about this… You’re looking to buy a new computer, but you don’t know anything beyond basic usage to get a task done… You go to the store and have an employee help you pick one out. The employee says “This one is a little more secure because it has ‘Secure Boot’ on it, and this other one which costs the same doesn’t have it”
Which one would you pick?
-
I have a UEFI device. Unfortunately, the biggest problem with ProxyDHCP is that iPXE tries to download the ipxe.conf file from the main DNS server instead of the ProxyDHCP server in my environment.
-
Not trying to be ugly, but there are no “rumors” of Windows 10 requiring Secure Boot. The only “rumor” is that Microsoft will no longer [B]require[/B] hardware OEMs to provide consumers an option to disable Secure Boot. The HPs and Dells of the world will continue doing so, especially in enterprise, so it’s likely a non-issue.
Anything more that you’ve “heard” on this subject is categorically false.
Windows 10 is not a threat in and of itself. The bigger threat is the mixed environments comment that was mentioned earlier. That’s quickly becoming an absolutely enormous issue.
-
Today at work, I noticed that my workstation supports UEFI and legacy.
I plan to turn UEFI on, and figure out the DHCP settings to make FOG work with Legacy BIOS and UEFI at the same time, diving out either undionly.kpxe or ipxe.efi based on the computer’s request.
Don’t know if I’ll figure it out, but there is a pretty good chance that I will.
-
That is absolutely possible via [URL=‘http://www.fogproject.org/wiki/index.php?title=Using_FOG_with_an_unmodifiable_DHCP_server/_Using_FOG_with_no_DHCP_server’]ProxyDHCP[/URL]. However, I’ve been fighting with it since clients seem to get the wrong next-server (DHCP options 66/67) if it’s not set via Windows DHCP.
-
[quote=“Wayne Workman, post: 44866, member: 28155”]Today at work, I noticed that my workstation supports UEFI and legacy.
I plan to turn UEFI on, and figure out the DHCP settings to make FOG work with Legacy BIOS and UEFI at the same time, diving out either undionly.kpxe or ipxe.efi based on the computer’s request.
Don’t know if I’ll figure it out, but there is a pretty good chance that I will.[/quote]
I greatly look forward to any documentation of your travels in this. It is something I have fiddled with, but have lacked the time to actually work on. I have a hunch that, if you are running a Windows Server Domain environment, you could use a WDS server to figure out the different systems, then chain it into the appropriate boot files fog FOG.
-
[quote=“need2, post: 45182, member: 21891”]I greatly look forward to any documentation of your travels in this. It is something I have fiddled with, but have lacked the time to actually work on. I have a hunch that, if you are running a Windows Server Domain environment, you could use a WDS server to figure out the different systems, then chain it into the appropriate boot files fog FOG.[/quote]
Follow my travels here: [url]http://fogproject.org/forum/threads/undionly-kpxe-and-ipxe-efi.12607/[/url]
That’s the junk thread that everything I find is going into… When I’ve got it nailed down, I’ll make a wiki article.
-
This post is deleted!
