What does HRESULT 0x80310071 (FVE_E_DV_NOT_ALLOWED_BY_GP) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The selected discovery drive type is not allowed by the computer's Group Policy settings. Verify that Group Policy settings allow the creation of discovery drives for use with BitLocker To Go.

Previous	Next
FVE_E_DV_NOT_SUPPORTED_ON_FS	FVE_E_POLICY_USER_CERTIFICATE_NOT_ALLOWED

FVE_E_DV_NOT_ALLOWED_BY_GP

The failed prerequisite

FVE_E_DV_NOT_ALLOWED_BY_GP / 0x80310071 marks a rejected BitLocker transition: Group Policy forbids creating the BitLocker To Go discovery volume requested by the caller.

When policy is the boundary, retrying under SYSTEM does not necessarily help: policy can forbid the operation for every caller. Separate authorization from allow/require/disallow settings before changing identities.

Diagnostic map

Layer	policy and authorization
Proof to collect	effective removable-drive policy, management source, target media type and the exact creation command
Different condition	FVE_E_DV_NOT_SUPPORTED_ON_FS, where the policy allows the operation but the filesystem cannot support it
First safe change	change policy centrally if legacy reader deployment is still required; do not work around managed restrictions on individual machines

A focused verification sequence

Recommended operational response

Change policy centrally if legacy reader deployment is still required; do not work around managed restrictions on individual machines.

manage-bde -status
gpresult /h bitlocker-policy.html

State checks specific to FVE_E_DV_NOT_ALLOWED_BY_GP

Stage	How to interpret it
Before the call	Record the target identity and the pre-call policy and authorization state. Group Policy forbids creating the BitLocker To Go discovery volume requested by the caller.
At failure	Preserve effective removable-drive policy, management source, target media type and the exact creation command.

Official references

Looking for a different code? Search another status or error code.