On 13/02/2018 18:37, Jeff Barnett wrote:

If a HD that is bootable is first in the list, the devices in the rest
of the list will NEVER be used to boot.

That is the idea to block people from booting anything from a USB
device. The reason is people can use Live Linux device and crack/remove
Administrator password and create havocs on the system.

In a corporate environment, the boot order is Network first so that
periodically you may want to refresh the system by reinstalling the OS
and applications from the images stored on the network drive. We use
Symantec Restore AnyWhere for this purpose. Very safe method IMO.


--
With over 600 million devices now running Windows 10, customer
satisfaction is higher than any previous version of windows.