Secure Token with Non-Filevault machines

[al786]

Has anyone seen a machine asking for Secure Token enablement with FV2 OFF? It's happening with our iMacs although FV2 is off whenever a mobile/ActiveDirectory user logs in for the first time. Thoughts??

[donmontalvo]

Are you seeing this on T2 model computers?

[tjhall]

We've seen this too on our Imac's.
No policy for filevault and getting a prompt for the admin account.

[allanp81]

@al786 There are plenty of threads about this. It only happens on High Sierra 10.13.4 or newer, with APFS disk and AD bound. There is a config profile you can apply to your machines that will suppress the message:

https://www.jamf.com/jamf-nation/discussions/27669/pre-stage-enrollment-issue-with-10-13-4-popping-up-securetoken-window-message-after-logging-into-ad-for-the-first-time