Device Security State Detected

This device has entered a restricted recovery state.

There are two common reasons a device reaches this state:

1) Remote Management / Monitoring Removed

The device is expected to retain approved management and monitoring software.

  • Removal or tampering may trigger an automated security response.
  • The device may be placed into a restricted recovery posture.
  • This is a recoverable state please read further down for help

Unrecoverable State Notice

In specific unrecoverable scenarios, an administrative action may have been executed to ensure the BitLocker recovery key is not retained or retrievable, this is performed if the device is deemed un-recoverable/stolen. another way to tell if this is the case is if the device still had the RMM installed and wasn't removed or tampered with

  • If that action occurred, the drive remains encrypted indefinitely.
  • Without an escrowed recovery key, the contents cannot be decrypted.

What the Management System Does

  • Provides device status and the last known location (when available).
  • Provides full system access at any time.
  • Can re-install required management components if removed.
  • Can place BitLocker into a tamper-protection posture to prevent unauthorized access.

If you believe this device is in this state by mistake, contact support "mark@the-walkers-tech.com" please provide the device identifier shown on the recovery screen (or provide the hostname/asset tag if available). please also keep aware if the devices RMM was removed you will have to get in touch for any kind of help and will propably have to come to my office If this happend to a device during off boarding proccess i will send recovery keys direclty to you when asked

SECURITY-RECOVERY-STATE