Encryption user not able to log in to preboot

[sw41]

ePO 5.10, DE 7.2.5

We have setup a new PC and the policy to encrypt the drive kicked off.  Logging out of our local account and logging in to our Domain account, I can see the user for the new machine in the list of Encrypted Users in EPO.  At the PC, reboot and the domain user cannot log in to the preboot screen.  Logged in as local, logged into windows as domain, locked the screen and unlocked, opened agent status monitor and C&P and send events, see in EPO it has updated, still see the domain user in Encrypted Users, and still the domain user cannot log in to preboot.  Checked the Orion log and see "No preferred registered server for domain=".  Went into EPO > registered servers > my LDAP, verified the settings, did a successful test connect.  I am not sure where to go to register the server for our domain.

This was all working before our EPO upgrade to 5.10  Feels like I am missing something simple.

[cdinet]

When you go into registered servers, even if you don't make a change, re-save that registration for the ldap server.  Check also the server log on epo to see if there are any errors sending user policy to the system.  Otherwise, I am going to transfer this to the encryption team since that is more their expertise.

[sw41]

what would that error look like? which server log? 

I checked in the orion log and do not see "policy or send".

watching the logs on the client, I am geting the impression the policies and tasks are working.

I saved the LDAP settings again and no change there.

[cdinet]

In the install directory for epo, under db\logs, you will see a server_servername.log file.  It would show lookup failed for ldap user.

[sw41]

Not seeing any errors, mostly just a bunch of http:// calls.