I saw a hot network question on SE, about Workplace Ethics - Do I give my password at work to my old boss after quitting?. My initial response (as are the answers in that question) is always NO. The reasons are highlighted there, and I'm sure all of you agree with me.
My question though is about one of the answers, talking about full disk encryption. For items like TrueCrypt, or maybe even BitLocker. They encrypt the disk, and use a passphrase to unlock it. I also know that Dell (and other companies, I'm sure) can have the hard drives encrypted before booting past the BIOS, again with a password.
With these methods, obviously just resetting a password in Active Directory or your Samba server won't give you access to the system. But what methods could an organization use that would allow Full Disk Encryption, but be able to recover or access the data if the employee leaves (i.e. Hit by a bus, fired, quit)? Or are there other considerations?
I should note though, that one of my previous employers used the Dell Hard Disk Encryption passwords, but it was set to our password, and we were free to change it whenever we wanted. An employee passed on, then all current laptops needed their passwords changed to ONE generic password, which I don't believe should be the case. Correct me if I'm wrong, though.