Having deployed Lenovo AutoPatcher Full to over 10,000 endpoints, here are the pain points and solutions:
Here’s a wrapper I use to safely run AutoPatcher full in production:
$repoPath = "D:\LenovoRepo"
$logPath = "C:\Logs\AutoPatcher"
$reportPath = "$logPath\pre_scan.csv"
mkdir $logPath -Force
The "Full" version can handle BIOS passwords via an XML config file. Create AutoPatcher.xml in the root folder:
<Settings>
<BiosPassword>YourGlobalPassword</BiosPassword>
</Settings>