Remove Device/User from Sophos Encryption Policy.  Do this by creating a new Policy with Bitlocker disabled and move the device to that policy Disable Tamper Protection Wait for Sophos to advise that...