Fellas..
We're about ready to enforce FileVault on a pilot group of about 100 users. While encrypting is the easy part, I wanted to know how you handle the decryption of Macs for when they are turned in for reimaging or redeployment.
We are utilizing both individual and institutional recovery keys, and we've read through Rich Trouton's documentation more than once. Howerver we were curious how others were handling such a task, as there seems to be no decryption method that management thinks is "fast enough"...especially if the previous user is no longer with the company.
They think going through the hassle of resetting local account passwords via Recovery Partition and / or decrypting using institutional key is too tedious and labor intensive.
Oh.. and the majority of our Macs are bound to AD.
Ideas?
