Start Windows Explorer, and then locate the %SystemRoot%\Inf folder. Right-click the Usbstor.pnf file, and then click Properties. Click the Security tab. In the Group or user names list, add the user or group that you want to set Deny permissions for.

Force a restart. Select Start > Power > Shut down and wait a moment for your Surface to shut down. Then press and hold the power button for 20 seconds. If you see the logo screen appear after a few seconds, continue to hold for the full 20 seconds until you see the logo screen again.

Learn how to update your security processor or TPM firmware to protect Windows 10 and your device from attacks by malicious software.

Automatically update Windows 10, Windows 11, and Surface drivers and firmware. After following the preparation steps, see Update Windows to learn how to check for updates and install them. Or select the Check for Windows updates button below to open Windows Update in Settings. Check for Windows updates.

Press [ Windows Key] + R or select Start > Run. Type “tpm.msc” (do not use quotation marks) and choose OK. If you see a message saying a “Compatible TPM cannot be found,” your PC may have a TPM that is disabled. See How to enable TPM for more information or check your PC manufacturer’s support information for instructions to enable the TPM.

Double-click Microsoft ACPI-Compliant Control Method Battery or Surface Battery, and under the Driver tab, select Uninstall device > OK. Select Start > Power > Restart . Restarting will reinstall the driver for you. If the battery charges above 40 percent after you reinstall the driver, try installing updates again.

If the USB recovery drive doesn’t work on your Surface. If you can’t boot from your USB recovery drive or don’t see the Recover from a drive option, you may need to ensure that the boot-from-USB function in the Surface BIOS is enabled or configure the boot order so the USB drive is the first option. For more info, see Boot Surface from a USB device.

Select Update Driver. If Windows doesn't find a new driver, you can try looking for one on the device manufacturer's website and follow their instructions. Reinstall the device driver. In the search box on the taskbar, enter device manager, then select Device Manager.

Windows 11. This article describes the problem addressed by the troubleshooter, what it does to mitigate them, and the conditions that can cause it to run. For more information about troubleshooting, see Keep your device running smoothly with recommended troubleshooting. What problem does this troubleshooter address?

It's used by services like BitLocker drive encryption , Windows Hello, and others, to securely create and store cryptographic keys, and to confirm that the operating system and firmware on your device are what they're supposed to be, and haven't been tampered with.