Volume encryption on unmanaged laptops and USB encryption not working

Question

Installing full disk encryption on unmanaged laptops for first time[installed 1 policy for volume encryption on boot drives, 1 for removable drives(USB), and 1 for our encrypted file shares]. 
 
 All appears to be working according to sgnstate utility, but in Windows Explorer, I do not see the green key on any drives. SGNSTATE show that the C:\ drive is encrypted. 
 However, I can not get the USB drives to encrypt. 
 Also, in POA, the check for changing password is greyed out, how do I enable this? 
 
 Any help would be greatly appreciated.

PaulD · Answer

Hi Lelizondo - You will need to install the data exchange module (as well as have a license for it) which enables the encryption for removable USB/thumb drives. 
 
Regarding the password change, if a user wants to change their password, the correct way of doing this is: 
 
POA | Options | Check 'Change password at next logon' 
or 
Ctr+Alt+Del | Change A Password... in Windows on their SafeGuard protected machine. 
 
You can find additional information regarding password policies here: 
 
 community.sophos.com/.../117256 
 
PaulD