Microsoft Surface Enterprise Management Mode (SEMM) lets you secure and manage firmware settings within your organization at the Unified Extensible Firmware Interface (UEFI) level. With SEMM, you can prepare configurations of UEFI settings and install them on a Surface device. In addition to the ability to configure UEFI settings, SEMM also uses a certificate to protect the configuration from unauthorized tampering or removal.

For more tips like this, check out the working remotely playlist at www.youtube.com/FoetronAcademy . Also, if you need any further assistance then you can raise a support ticket and get it addressed.