Bitlocker - Too Many Attempts

Question

We are using Sophos Central to manage Bitlocker encryption. We are frequently having users call the help desk stating that Bitlocker says "too many attempts" after what they report as only a single attempt. This seems to happen frequently after a device has not been used for a while and has rebooted automatically due to Windows updates. We then have go through the Bitlocker recovery process to get the user into the laptop, which is often about as simple has asking the user to reset a nuclear launch code. Then we have to get our hands on the device and perform a TPM reset. Why does this happen and what can we do to prevent it? Thank you.

This thread was automatically locked due to age.

Shweta · Accepted Answer

Hi Darth_Boss 
 You can try the steps listed in this article and see if it helps.

Jasmin · Answer

Hi Darth_Boss 
 Your concern is understandable but this is something depends on the TPM settings and Sophos has no hands-on it to lock it out. Once it is locked out, we have to follow the options mentioned in the article provided by Shweta. 
 Apart from that, I'd also suggest you to try out the options Microsoft provide to handle TPM through the Group policy which can handle TPM lockouts. 
 Please refer to this article by Microsoft.