Encrypted Users Directory This is the scenario:

I have some macbooks bound to Active Directory, so that any AD user can log in. Per requirements from above, all user data needs to be encrypted. Encrypting the entire hard drive proves to be problematic because it prevents authentication against AD when the laptop just boots up.

Is there a away to put the entire /Users directory on an encrypted partition so that a user can log in and then decrypt the Users partition?
After a bit more googling, I found what I was looking for:

https://github.com/jridgewell/Unlock


  Description
  
  Unlock allows the system to unlock and mount Core Storage encrypted
  volumes during boot. In other words, this allows you to log in as a
  user whose home directory is on an encrypted secondary disk without
  any problems.