Enable preboot authentication

Pre-boot protection requires users to authenticate to their computers before the operating system loads. This prevents unauthorized access to the operating system using authentication bypass tools at the operating system level or alternative boot media to bypass boot protection.

To enable Pre-boot:

Go to Policy > Data Protection > General > Capabilities and Exclusions > Full Disk Encryption, then click Enable Pre-boot.

Tip:

We recommend to enable Pre-boot. When Pre-boot is disabled, the user can bypass the Pre-boot authentication at the cost of reducing the security to a level below encryption strength. Users authenticate to their computers only at the operating system level. If Pre-boot is disabled, consider using SSO.