I work for a State agency that manages tens of thousands of machines, and as part of our retiring process we have been using diskpart to disable the active bit on the partition so that it will not boot again so that a worker can't just go grab any machine off the storage shelf and put it back into production. This has been working fine until PGP was updated and now with that update PGP disables changes to the MBR so our batch script no longer works to disable the machines from booting up. I have been messing around with the wmic commands to see if I can get them to disable the drive in the BIOS but I am not having much luck, probably because I don't have much experience with them.
I ask for a batch file because I am more familiar with it, but I am open to anything that will work and help me get this to work. Any help is very much appreciated.