Due to the serious nature of issues that arise by including PGP Desktop in an image, this practice is not supported.

If PGP has been included in a corporate image that has been rolled out, the MACHINEGUID value that sets the encrypted Device ID could be duplicated, and render Whole Disk Recovery Tokens useless.

It is highly discouraged and not supported to include PGP Desktop in the system image.  When the system image is deployed to a machine, install PGP Desktop after the system has been imaged. 

If PGP is included as an installed application in the system image, a full decryption of the systems and uninstall of PGP Desktop will be required.

Please see the following KB for more detailed information on how to remedy incorrectly deployed images of PGP Whole Disk Encryption:

http://www.symantec.com/docs/TECH194265

***WARNINGS***

• If using PGP Remote Disable & Destroy, it is critical to follow these strict requirements and not include PGP Desktop on the system image deployed to systems.  Having improper Device IDs for a system encrypted with PGP RDD enabled will cause rendezvous errors to PGP Universal Server and possibly lock user out of the computer. 
• Do not remove the MACHINEGUID in the registry. This can cause logging errors and unexpected behavior in the software. Please see TECH203267 for more information.