I just noticed that when we use SSO with our disk encryption, it hangs at the legal banner prompt in Windows and the user has to click though that to continue.
It didn't seem like a big deal except that I noticed that it never times out and doesn't trigger screen lock when it is at the legal disclaimer notice. If I user enters their disk encryption password and gets distracted and walks away, their system is wide open indefinitely even though we have screen lock policy that otherwise kicks in after 10 minutes.
Is there any way around this issue other than disabling SSO or disabling the banner?