There is a way to be able to recover users if they forget their passphrase. In order to do this, the SEE Helpdesk Administrators (Admins with the Helpdesk role) can retrieve a recovery key from the SEE Helpdesk Web Portal.
To see more information on this, consult the help file:
About Help Desk Recovery and recovery methods
Assisting users using the Drive Encryption recovery method
Assisting users using the BitLocker recovery method
Assisting users using the FileVault recovery method
Assisting users using the Encryption Desktop recovery method
How to Decrypt a Drive with Symantec Endpoint Encryption
As you can see, there are many ways to do the recovery. For more information on the SEE Administration Web Portal as well as Dashboards and reporting, see the following article:
156303 - Symantec Encryption Products Current Version Available
240649 - Symantec Endpoint Encryption 11.4 Dashboard and Reports