"We can’t lock your device right now" means the remote lock command could not be delivered at that moment, typically because the device is offline or otherwise unreachable. It does not mean the request will automatically retry later.
To protect the stolen Surface Pro:
- Do not remove the device from the Microsoft account yet. If removed, it cannot be managed (found or locked) through that account.
- Leave Find my device turned on for that device (it must have been enabled before the theft for this to work).
- Periodically sign in to https://account.microsoft.com/devices and:
- Check the Find My Device tab to see if the location has updated.
- Try Lock again when the device shows as online or its location updates.
The lock action only succeeds when the device:
- Connects to the internet,
- Can reach Microsoft services, and
- Is still associated with the Microsoft account used to send the lock command.
Once the device is successfully locked from the Find My Device page, it will require the Microsoft account password to unlock, and the thief will not be able to access files without that password.
Also ensure the account and data are secured:
- Change the Microsoft account password to a strong new one.
- Enable two-factor authentication on the Microsoft account.
Continue working with law enforcement using any location information that may eventually appear in Find My Device.
References: