My current process of encrypting user laptops is to set the password for myself, create a rescue disk, test login and have user set the password to their liking. I do this while physically with the laptop.
How can I encrypt the remote laptops without knowing the user password and having a rescue disk with a password that only I know while being remote? I can't remote into the machine until it boots into Windows.
Secondly how can I reset the password remotely without giving the user the rescue disk with my password? I stress to the users that I can't easily reset their password so don't forget it but I'm bound to have to do a reset at some point. I feel like I'd need to have the user send me their laptop to not give up the credentials.