dfci unlock

For your privacy and security, I have covered the personal information included in your post. Please avoid sharing any personal or sensitive information publicly, such as serial numbers, order details, email addresses, phone numbers, or case-related information.

Hello Arash Zandi,

I understand how frustrating this must be, especially since Windows itself works normally while important Surface UEFI settings remain restricted.

The “limited by an organization” message and the disabled USB boot option indicate that the device may still be managed through Device Firmware Configuration Interface (DFCI). DFCI operates at the UEFI/firmware level, so reinstalling or resetting Windows does not necessarily remove these restrictions.

DFCI management normally needs to be removed by the organization that originally registered and managed the device. If possible, please contact the seller or previous owner and ask them to have the device removed from their organization’s Intune and Windows Autopilot management. Microsoft provides more information about this process here: Manage DFCI on Surface devices.

If the previous organization cannot be contacted, you may also contact https://support.microsoft.com/contactus to ask whether any support options are available. However, please be aware that proof of purchasing the device second-hand may not by itself authorize the removal of management applied by another organization.

Please note that this is a user-to-user support forum. Forum contributors cannot access the device’s Intune, Autopilot or DFCI registration or remove the restriction remotely. Thank you so much for your understanding.   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.