Preboot Password not working properly

[SVT_KH]

We began installing CP FDE on a testing device, and the initial results were positive. We performed tests with both preboot disabled and enabled scenarios. Ultimately, we decided to roll out the policy with preboot disabled. Afterward, we applied the same configuration across the entire environment.

Unfortunately, after installing the software on around 100 devices, we encountered an issue where some devices had preboot enabled, despite using the account that was initially tested on the testing device. These affected devices are not disabling preboot authentication, even after syncing with the latest policy.

Could you please suggest any alternative solutions for this?