Windows 10: Windows boot manager has been blocked by the current security policy

Jaydon Peart · May 10, 2025 at 12:37 AM

Hi, so I was trying to launch a game, when it said I need to enable secure boot. I went into BIOS and switched to user mode so I could enable secure boot. However user mode doesn't seem to work as I'm always met with the error "windows boot manager has been blocked by the current security policy" and therefore I can't boot up into windows, so I have to switch back to setup mode which also means that secure boot is once again disabled. This all started happening when I upgraded my BIOS version to lzcn40ww. I'm not sure if there is a fix but user mode should not be having boot errors.

:)

Daesung X · May 10, 2025 at 12:41 AM

Windows Boot Manager has been blocked by the current security policy.

Hi I wanted some help on how I can get my laptop (is a Lenovo g50-80)to work again ever since this morning it''s been stuck with with a blue window saying Windows Boot manager has been blocked by the current securit policy then window appears

Next appears this window after I click it it says "No Boot able device -- Please restart device" after that it repeats .

Brink · May 10, 2025 at 12:41 AM

Microsoft Guidance for blocking vulnerable Windows boot managers

KB5027455: Guidance for blocking vulnerable Windows boot managers Introduction Microsoft was made aware of a vulnerability with the Windows boot manager that allows an attacker to bypass Secure Boot. The issue in the boot manager was fixed and released as a security update. The remaining vulnerability is that an attacker with administrative privileges or physical access to the device can roll back the boot manager to a version without the security fix. This roll-back vulnerability is being used by the BlackLotus malware to bypass Secure Boot described by CVE-2023-24932. To resolve this issue, we will revoke the vulnerable boot managers. Because of the large number of boot managers that must be blocked, we are using an alternative way of blocking the boot managers. This affects non-Windows operating systems in that a fix will have to be provided on those systems to block the Windows boot managers from being used as an attack vector on non-Windows operating systems. More information One method of blocking vulnerable EFI application binaries from being loaded by the firmware is to add hashes of the vulnerable applications to the UEFI Forbidden List (DBX). The DBX list is stored in the devices firmware managed flash. The limitation of this blocking method is the limited firmware flash memory available to store the DBX. Because of this limitation and the large number of boot managers that must be blocked (Windows boot managers from the past 10+ years), relying entirely on the DBX for this issue is not possible. For this issue, we have chosen a hybrid method of blocking the vulnerable boot managers. Only a few boot managers that released in earlier versions of Windows will be added to the DBX. For Windows 10 and later versions, a Windows Defender Application Control (WDAC) policy will be used that blocks vulnerable Windows boot managers. When the policy is applied to a Windows system, the boot manager will “lock” the policy to the system by adding a variable to the UEFI firmware. Windows boot managers will honor the policy and the UEFI lock. If the UEFI lock is in place and the policy has been removed, the Windows boot manager will not start. If the policy is in place, the boot manager will not start if it has been blocked by the policy.
Click to expand...

Read more: https://support.microsoft.com/en-us/...4-ad11119c5e91

JamesMellen · May 10, 2025 at 12:41 AM

Windows 10 boot manager

Boot manager has be block by current security policy after update, have a Dell Inspiron

Windows 10: Windows boot manager has been blocked by the current security policy

Windows boot manager has been blocked by the current security policy

Windows boot manager has been blocked by the current security policy

Windows boot manager has been blocked by the current security policy

Windows boot manager has been blocked by the current security policy - Similar Threads - boot manager has

Windows boot manager has been blocked by the current security policy

Windows boot manager has been blocked

Windows boot manager has been blocked

Windows error shows up when starting: "Windows Boot Manager has been blocked by the current...

Windows error shows up when starting: "Windows Boot Manager has been blocked by the current...

Windows error shows up when starting: "Windows Boot Manager has been blocked by the current...

Secure Boot policy has unexpectedly changed.

Secure Boot policy has unexpectedly changed...

Secure Boot policy has unexpectedly changed...