0

I'm considering to wipe a Windows 10 PC using the APIs in the MDM_RemoteWipe class in the namespace cimv2\mdm\dmmap.

I have basically succeeded in wiping some Windows 10 PCs, but I know that the Windows PC under the following two conditions causes an API error and fails to wipe.

Is there a way to reliably run the wipe even under these conditions?

COND-A: Enabled BitLocker protection (it seems to cause COND-B sometimes)

COND-B: Disabled WindowsRE

See also

https://learn.microsoft.com/en-us/windows/win32/dmwmibridgeprov/mdm-remotewipe-dowipeprotectedmethod

https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-recovery-environment--windows-re--technical-reference?view=windows-10

https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-management/remotewipe-fails-sending-dowipe-command

(it says "This can occur if the Windows Recovery Environment (Windows RE) is disabled on the Windows 10 client computer. The RemoteWipe CSP requires Windows RE in order to function.")

I am considering implementing "Reagentc /enable" as a solution.

However, I am not sure the following things:

  • Impact on PCs with WindowsRE already enabled

(Or can I determine if WindowsRE is already enabled before running? parse "Reagentc /info"?)

  • Can "Reagentc /enable" always succeed and enable WindowsRE?

  • Impact on PCs with BitLocker protection already enabled

Toru Suyama
  • 1
  • 1

0 Answers0