Preboot Password not working properly

[SVT_KH]

We began installing CP FDE on a testing device, and the initial results were positive. We performed tests with both preboot disabled and enabled scenarios. Ultimately, we decided to roll out the policy with preboot disabled. Afterward, we applied the same configuration across the entire environment.

Unfortunately, after installing the software on around 100 devices, we encountered an issue where some devices had preboot enabled, despite using the account that was initially tested on the testing device. These affected devices are not disabling preboot authentication, even after syncing with the latest policy.

Could you please suggest any alternative solutions for this?

[PhoneBoy]

I suspect this is going to require TAC assistance to understand what's going on: https://help.checkpoint.com 

[J_B]

This is a device policy, rather than user, so are all of the devices in the same OU and picking up the same policy?

If you go into the Endpoint Client then 'Advanced' -> 'View Policies' can you confirm if the devices that aren't getting preboot disabled have the correct policy applied?