Just had a user forget his password and so we had to use ECA to get the password but this users machine shows as encryption inactive even though the user setup and let his machine encrypt?? I dont know why this happened on 1/10 machines but seeing as EFDE is installed but saying its inactive even though it is working on the machine, what would be the best way to resolve this error now??? Seeing as ECA doesnt think EFDE is active i assume that also means applying our Policy with the encryption disabled which we were told would be used to decrypt machines, how can we fix this error if we cant decrypt via ECA, surely trying to remove EFDE would break the whole encryption wouldnt it?? We managed to use recovery password to get back into the machine but we just need to resolve ECA thinking the machines EFDE is inactive now??
Any ideas??
Also are there any plans to add the ability for the super user to delegate another user to be able to retrieve and use the recovery methods on ECA?? For us its causing problems already with only the superuser being able to perform these tasks as we only have 2 users on ECA and we need both to be able to retrieve decryption passwords too?? Im really hoping this is something coming as it seems strange its all left to the super user to have to do??? (presently were now thinking of setting up a new account as the superuser then sharing hte password and disabling 2FA which is madness)
Thanks
JK
