The client system prompts for authentication on the preboot logon page to access the system. When a user forgets the password, is disabled in the Active Directory, or loses the token, the user can't log on to the system.
Resetting the user’s password, unlocking the disabled user, replacing a lost logon token, and performing machine recovery require a challenge and response procedure. The users must start their system and click Recovery on the Drive Encryption preboot logon page. This option needs to be enabled on the ePO - On-prem server before performing this task on the client systems.
Use ePO - On-prem to enable or disable the administrator (system and user) recovery functionality on the client computer.
Click → → , then select a group from the System Tree.
Select a system, then click → → to open the Policy Assignment page for that system.
From the Product drop-down list, select Drive Encryption 7.x. The policy categories under Drive Encryption display the system's assigned policy.
Select the Product Settings policy category, then click Edit Assignments to open the Product Settings page.
If the policy is inherited, select Break inheritance and assign the policy and settings below next to Inherit from.
From the Assigned policy drop-down list, select a product setting policy, then click Edit Policy to open the policy Product Settings page.
From this page, you can edit the selected policy, or create a new policy.
On the Recovery tab, enable or disable the system recovery functionality.
From the Key size drop-down list, select the required recovery key size, then enter the message to appear on the recovery page.
Click Save on the Product Settings page.
Send an agent wake-up call.