For example, when a Surface device is enrolled in Surface Enterprise Management Mode (SEMM), it prevents any unauthorized changes to Surface UEFI settings. So, to restore control of Surface UEFI ...