15 - 25% of the computer we encrpryt fail. Wherein failure is defined as client unable to use the device do to an error in the encryption software. Mostly do to password and account sycronization problems.
of the 15-25% - 45% require the machine to be flattened and re-encrypted because no one can access the computer. This is mostly because it is faster to redeploy than to try and fix sycronization timeout issues.
This is what we are seeing with our laptops and we have about 500.
It has gotten a little better since the latest patches for the product.
Are you familiar with our "one time boot" procedure? This allows you to get access to a computer that doesn't have any accounts assigned to it. You simply do a challenge/response like you would when you reset a password. But instead of choosing "reset password" you choose the one time boot option. This gets you into Windows. From there you can sync with the server, where you would have fixed your user provisioning problem.
I believe so. The one wherein we call support for the password of the day. Then we can get to the desktop. The problem we have is if we can get the server support team to get the password we normally get errors in sync with database. When this error occures the server teams has informed us support says to flatten and restart. The time it takes to complete all the steps needed to discover we have to flatten is the same it takes us to reimage and get encryption restarted.
If this is the wrong "one time boot" thing please let me know, we would kill to not have to reimage and re-encrypt.
You may not even need to call suport to get the code of the day. This is only required for a subset of the recovery options. If you just want to rescue data from the drive, using the WinTech utility you don't need the code. You just need to authenticate, using name/pw or the sdb file from the server.
Just click cancel when you see that box. WinTech will let you authenticate, but the box on the bottom will say "unauthorized". You can still operate WinTech in this mode, just some functionality will be disabled until you enter the daily code.