Windows 10: Persistent lockouts

I deployed a new computer to a end user and now I am dealing with a persistent lockout issue. It seems to be related to Remote Desktop. I have performed the following steps:-Cleared Credential Manger-Verified no saved passwords in Microsoft Edge & Google Chrome-Revoked 2FA token-Signed out of all sessions-Force log out of Remote Desktop-Monitor sign in logs-Checked Lockoutstatus.exe for server-Checked Event Viewer for the server mentioned in Lockoutstatus.exe e.g. event 4740-Installed the latest Windows Updates and Dell SupportAssist Driver updates-Updated RemoteApps-gpupdate /force-Syn

:)

 

TPM 1.2 Lockout

I entered a bitlocker key incorrectly and was told that there were too many attempts. This was about 36 hours ago

I used the recovery key to get onto my laptop but every time I restarted my machine the same error came up.

I have now done the following about 24-hours ago:

• Disabled Bitlocker including decrypting the drive
• Disabled the TPM
• Re-enabled the TPM
• Cleared the TPM

When I try and enable bitlocker again I get the message "The TPM is defending against dictionary attacks and is in a time-out period"

Questions

1) How do I overcome this block?

2) How does the time-out period work - do you have to keep the computer turned on for the whole period for it to reset?

3) Does every time I try and re-enable bitlocker reset the lockout period timer?

It is a Dell laptop so I think the lockout period is 24-hours.

 

TPM 1.2 Lockout

Hi RobBoston83-

I'm Kevin B. Independent advisor and a Windows 10 user like you. I do apologize that you are experiencing this kind of inconvenience.

For some reason, there's nothing much that w can do since it is not software related problem.

As a security feature the TPM will lock itself to help prevent attacks or any kind of unauthorized access. Below will provide some information on TPM failure attempt options, lockout recovery times and lockout recovery.

Failure Tries:

Up to 13 per day. Please see the following table for detailed failure-lockout periods.

While TPM is in lockout, no authorization command will be accepted during lockout period.

Failure Tries Recovery Time:

The failure try counts will be reset after 24 hours from last failure try.

The timer will be reset after the TPM VSB (TPM chip power cell) is powered-up.

Lockout Recovery:

Keep the TPM VSB powered during the lockout period and wait for the lockout duration period to expire.

Or

Reset both the failure tries and the lockout state by using the Microsoft TPM Management Console with correct owner password.

Hope this will help and have a blessed day!

Thanks.

Kevin B.

Independent advisor

 

User Lockout

After you've finished the system restore and the issue persist, I suggest you to reset your computer. Please click this
link and follow the steps. To give you a heads up, please select Remove everything settings.

Regards.