How to cancel FileVault enablement after running a policy or applying a configuration profile that enables FileVault, since deferred enablement status may persist after removing the configuration profile or the policy completes
​

1. Make sure that there are no configuration profiles applied to the computer with the Security and Privacy payload > FileVault > Require FileVault encryption.
​
2. Run the following command in Terminal:

sudo fdesetup disable
​
3. If this file exists, delete it:

The computer should no longer be in deferred enablement status, and it should no longer prompt to enable FileVault at login, logout, or reboot.