Surface laptop DFCI management in BIOS

[Dw198]

I'm looking to buy a Surface Laptop 4 second hand, but the seller showed me something in the BIOS. Does this mean the laptop is still remotely managed? Should it be removed and what are the potential downsides if it isn't?
Seller said he wasn't able to do an opt-out in the bios when connected with ethernet and adapter

Besides that all options in bios are available and laptop allows fresh install of win11 pro without any troubles in oobe

[Dw198]

Anyone ? I'm afraid when buying such a laptop they'll still be able to lock me out or control settings

[ahmypc]

Hi, It is interesting that the oobe screen allows passwordless installation or the ability to open a new account. Normally, even if there is no internet connection, it should ask for a session password with a company account. This can happen at any time. The bios file needs to be cleaned.

[Dw198]

Hi, It is interesting that the oobe screen allows passwordless installation or the ability to open a new account. Normally, even if there is no internet connection, it should ask for a session password with a company account. This can happen at any time. The bios file needs to be cleaned.

Is it easy to clean the bios file or will it go to original state based on hardware hash?

Seller did said he removed it from Intune, autopilot / removed tenant. But run into an error when removing dfci