Endpoint Encryption

Hello I have a client that just has Removable media installed. They want to know what rile the administartor plays in the removable media on a SEE removable media desktop? 

 they can uninstall the application from the client machine! If a user A has encrypted a file A by password -- then user A can only decrypt file A -- no matter if local admin or domain admin gets that file they will not be able to decrypt the file. You need to have the password/cert via which the file is encrypted -- even the symantec tech support donot have a master password/cert that they can provide you to bypass the encryption --- if user forgets it.

 so the administrator can uninstall and install the application. That is it? they need to follow a procedure a different one to recover lost password etc?

there is no way that admins can come to know about the lost passwords ...... there is no way to find out password of an encrypted file ......