VPro enabled. Please Help.

Question

Windows 11 ProLatitude 5410I picked up a Latitude with the Original Configuration stating that it *did* have VPro enabled (c/w sticker). It also had Remote Connection installed in Programs (and Features). I did a clean install of Windows (Local Account).To date I have removed previous owner's credentials, uninstalled Remote Connection and AMT is disabled in the BIOS. Is there anything else I can do, or not do, to mitigate the vulnerabilities of dealing with this powerful bunch of 'programs' ? I dislike having no clue as to what ‘the system’ is or can do.btw, Secure Boot is *not* enabled in BIOS Setup and it shows as Off in msinfo32 as well. Did I read that enabling it at this stage would cause the need for a clean install ?

ejn63 · Answer

vPro is a factory configured option. It is either set to ON or OFF when the system is manufactured. Once that's done, the setting can no longer be changed short of replacing the system board with one having the desired (presumably off) configuration.

Secure boot is a requirement for running Windows 11 in fully supported mode. If it's off and the system is set up in GPT mode, it can be enabled or disabled at any time. If it's off and the system is set up in MBR mode, you would need to do a clean install and re-do the disc -- or run the MBR to GPT utility Microsoft publishes -- to allow it to be enabled.

Maxd1 · Answer

@ejn63​ Thankyou for sharing.  btw, Would you say that having AMT in BIOS set to OFF would be a mitigation of VPro ?

Latitude

VPro enabled. Please Help.

Was this post helpful?