Safeguard and Windows Gina

What is it that you're trying to achieve here?

You need some sort of authentication to decrypt the drive prior to Windows start - you could always use Bitlocker encryption with the keys managed by SafeGuard and probably not use the SafeGuard Gina at all.

Edit: you can also turn off POA in the machine settings policy object - don't know if this is compatible with Device Encryption or makes sense as per my comment above.

I am trying to have only the windows gina displayed to users and not the sophos gina.

You could try Gina chaining, so that the Windows Gina is displayed first and then passes through to the Sophos one?

No idea whether this will work, a competing vendor offers some information here.

You could try Gina chaining, so that the Windows Gina is displayed first and then passes through to the Sophos one?

No idea whether this will work, a competing vendor offers some information here.