I've just found & looking at the Lenovo bios config tool and going to have a play, I can see command line options etc. so looks like it's possible to remotely enable secureboot and deploy via SCCM & include on a task sequence.
Right now, I want to try #3 first, and can get the laptop to crisis mode using Fn+R, which turns off the keyboard lights, and makes the orange light flash on the side. I have downloaded the BIOS (GLCN52WW), and extracted the other files from the EXE, but the actual bios file does not have an extension. I have attempted to rename it and give it various extensions (rom, wph, fd, bin), and then copy those to a USB, including using WINCRISIS, and other things that people have tried in similar cases, but the dead laptop doesn't seem to be able to recognize the file to be able to flash it.
Lenovo S30 Bios Download
Download Zip 🔥 https://urluso.com/2y4D9N 🔥
e24fc04721
sentinel ldk runtime v7.9 available for download