My manager has restricted my use of Ventoy.

[Steve2926]

You can avoid the Secure Boot problem by using Easy2Boot and partition images, but it means you first have to Secure Boot to WinPE to switch in the partition image.
However, it does mean that you do not need to modify the BIOS UEFI settings and you cannot boot Non-Secure Boot loaders.
https://easy2boot.xyz/uefi64-secure-booting/