[FDE] IT support accounts on FDE secured computers

[Ali, Saqib]

As it turns out, deploying FDE to users is not the most complex task -
providing day-2-day IT support is.

My cousin works for a medium sized financial institution which
recently deployed FDE. Providing day-to-day IT support to the users is
becoming a hassle. Every time the IT support person has to work on
laptop the owner must be present to enter their credentials into the
pre-boot authentication.

Can anyone give me some real-word examples of how other institutions
have tackled this issue? How do they the allow the IT support person
to work on the laptop if the user is not present and laptop is
turn-off?

saqib
http://www.linkedin.com/in/encryption