Our company has been looking for an encryption solution. Currently we are using McAfee Endpoint Encryption with EPO but we are a little disappointed with the management and technical troubles we have had. One of our main concerns is pre boot authentication. We have pre boot with McAfee and it uses single sign-on to authenticate with windows. However, this has also given us some trouble in the past. My question is, when using BitLocker in FIPS mode, does the partition remain locked at the windows login screen?

If the computers have TPM, consider using TPM-only validation. Then it does not require any interaction with the user to decrypt and provide access to the drive. If the TPM validation succeeds, the user logon experience is the same as a standard logon. If the TPM is missing or changed, or if the TPM detects changes to critical operating system startup files, BitLocker enters its recovery mode, and you need a recovery password to regain access to the data. If no TPM is present on the computer, you need to select Startup key. However if you encrypt system drives, you can select to automatically unlock other drives. After doing so user need to enter the startup key at startup and then all drives are unlocked. Refer to: Learn more about BitLocker Drive Encryption http://windows.microsoft.com/en-US/windows7/Learn-more-about-BitLocker-Drive-Encryption Scenario 1: Turning On BitLocker Drive Encryption on an Operating System Drive (Windows 7) http://technet.microsoft.com/en-us/library/ee424299(v=ws.10).aspx Scenario 2: Turning On BitLocker Drive Encryption on a Fixed or Removable Data Drive (Windows 7) http://technet.microsoft.com/en-us/library/ee424323(v=ws.10).aspxPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.