Sophos Enterprise Console - How to edit encryption policy?

[enbiggen]

Hi, does anyone know how to set up full disk encryption so that "Pass through logon to Windows" is unchecked by default? There doesn't appear to be a setting in the "Sophos Enterprise Console" to configure this, and most of the instructions I find online don't deal with doing it from the console. Is it simply not possible, or am I missing something obvious?

 

I'd appreciate any help.

 

Thanks.