After applying the latest windows updates, the problem no longer appears. Not sure why that would affect the pre-boot system at all, but there you go.
Thats normal for first time user.. if "local recovery" enable for particular machine..
I believe it's will popups 3 time each time user login.. if user did not enroll..
then it's will dissaopear .. and consider user doesn't want to enroll local recovery until you reset the local recovery on the manager..
local recovery mean user need to answer set of question to reset their password locally.
Without need 16 chanllege code.. Check in Endpoint Encryption Manager for local recovery option.