Back in 2016, Microsoft released a Surface Enterprise Management Mode often known as SEMM. This mode allows you to manage and control the Surface UEFI settings. However this mode is limited to the Surface Pro 4 and Surface Book devices.
But today Microsoft added one more thing in this saga. Microsoft announced a new option for deploying and managing SEMM in user’s environment, System Center Configuration Manager. The new Configuration Manager deployment path streamlines the deployment process into a simple two-stage application deployment. Here they are:
In first step user have to place the required SEMM assemblies on the Surface device by deploying the Microsoft Surface UEFI Manager. And for the next step once the assemblies are present, you can deploy, manage, or remove SEMM all through PowerShell.
Don’t worry if you can’t understand it anything. You can find a full tutorial and detailed information with many samples scripts for many common SEMM management tasks from Sample PowerShell scripts for managing Surface Enterprise Management Mode (SEMM) over Microsoft TechNet website. In addition you can also download and install the Microsoft Surface Surface UEFI Configurator and Microsoft Surface UEFI Manager from the Surface Tools for IT page in the Download Center.
Source : TechNet Microsoft
