In 10.2 boot screen, you are required to enter Domain. Please check that you are entering the right information. Is it a local or domain user?
If you don´t like this setting, it can be changed from Universal Policy. Desktop , Disk encryption, "Display simple authentication field"
Re-enroll client (close pgp, delete users profile , open pgp and follow enrollement process.
After this, user and devices will be refreshed on the server, as well as client policy
Update when finished