| Previous | Next |
| STATUS_FVE_SECUREBOOT_CONFIG_CHANGE | STATUS_FVE_VOLUME_EXTEND_PREVENTS_EOW_DECRYPT |
STATUS_FVE_DEVICE_LOCKEDOUT
BitLocker device lockout triggered
STATUS_FVE_DEVICE_LOCKEDOUT is a protection-policy result. It means repeated incorrect password attempts triggered Device Lock, so the next action is governed by recovery and lockout policy rather than by normal unlock retry logic.
For operational handling, separate this from a wrong password typo. A locked-out device may require recovery-key workflow, helpdesk verification, cooldown, or policy-driven remediation, depending on how BitLocker and device security were configured.
Diagnostic focus
- Stop automated password retries once lockout is detected.
- Use the organization recovery process and verify that recovery information is escrowed in AD DS or Microsoft Entra ID if applicable.
- Record attempt source and timing to distinguish user error from brute-force or scripted retries.
References
- Microsoft: BitLocker FAQ
- Microsoft: BitLocker preboot recovery screen
- Microsoft: Configure BitLocker
- Microsoft: BitLocker recovery overview
- Microsoft: BitLocker drive encryption for OEMs
- Microsoft: COM error codes for TPM, PLA and FVE
Looking for a different code? Search another status or error code.