I've been testing 10.13.3 for deployment. So far, everything seems to work. However, our managed mobile/AD accounts are no longer enabled for FileVault2 after the High Sierra upgrade. Has anyone found a way to enable managed mobile accounts for FileVault2 without manual intervention? I would prefer not to enable these accounts manually for our entire company. A script for granting secure tokens would really help.