This was just discussed....
But you can make a script to move machine object to the group that has "Remove&Reboot" as default. You can also force group settings to machine, if it is not a controlled group. Someone suggested also to use autoboot, just in case that assigned users will differ between reboots (if decryption did not finish, before user decided to restart PC).
Thanks a lot, this definitely helps ! I did not think of this way to accomplish this task.
Where was this issue discussed ?
It was discussed here, in this forum.