Typically, firmware is more resilient to malicious attacks. In Intune, use this feature to control BIOS settings. For an overview of benefits, scenarios, and prerequisites, see Overview of DFCI.ĭFCI enables Windows to pass management commands from Intune to UEFI (Unified Extensible Firmware Interface). You can safely ignore the account, delete the account, or else it should be deleted the next time TVSU is run.When you use Intune to manage Autopilot devices, you can manage UEFI (BIOS) settings after they're enrolled using the Device Firmware Configuration Interface (DFCI). However there isn't any security risk to this because both the account and password are random and not known by anything except the specific TVSU process that created them, and this process ended the last time TVSU was closed.

The account is supposed to be deleted after the TVSU session finishes, but I'm aware of a case where this doesn't happen and the account stays around. The account is not created when an admin user does updates, because the admin user already has the permissions needed to do installations. This is the only time the account is created. And to accomplish this, the TVSU service creates a temporary admin account with a random name and random password, and uses it to do the installations on behalf of the limited user. It enables you to get the latest updates from the Lenovo support site.Ī design point of TVSU is that even limited users can install updates from Lenovo.

ThinkVantage System Update™ helps you reduce the time, effort, and expense required to support and maintain the latest drivers, BIOS, and other applications for Think or Lenovo systems. It's related to Lenovo ThinkVantage System Update - TVSU

Lenovo tvsu windows 10