What does NTSTATUS 0xC0210027 (STATUS_FVE_POLICY_USER_DISABLE_RDV_NOT_ALLOWED) mean?

STATUS_FVE_POLICY_USER_DISABLE_RDV_NOT_ALLOWED

Meaning and context of STATUS_FVE_POLICY_USER_DISABLE_RDV_NOT_ALLOWED

RDV in this status refers to a removable data volume. The operation was rejected by BitLocker policy: it is not a failure to decrypt sectors and it is not corrected by using a different drive letter or reconnecting the device.

Determine which policy source controls the device—local policy, Group Policy, mobile-device management, or a security baseline—and record the target volume classification. Changing an individual protector cannot override a policy that prohibits users from turning off encryption on removable media.

Review policy and recovery requirements before changing the rule. BitLocker configuration is commonly applied when protection is first enabled, so an environment can contain volumes whose existing state and current policy need to be evaluated separately.

BitLocker configuration | BitLocker operations | NTSTATUS reference

Native status interpretation

STATUS_FVE_POLICY_USER_DISABLE_RDV_NOT_ALLOWED is 0xC0210027, an NTSTATUS error value. AllStat describes it as “Group policy does not permit turning off BitLocker Drive Encryption on roaming data volumes.”