4. Enable BitLocker

1. Open the Start Menu.
2. Type BitLocker → click Manage BitLocker.
3. In the BitLocker Drive Encryption window, click Turn on BitLocker.
4. Choose the unlock method: select Let BitLocker automatically unlock my drive.
5. When asked how to back up the recovery key, choose Save to file.
6. Browse to \\bcupublicdrives\gpo$\BitLocker (this should be pre‑populated).
7. File name: use the computer’s serial number.
8. Retrieve serial number via wmic bios get serialnumber.
9. Click Save.
10. Click Next to finish the backup step.
11. When prompted, choose to Encrypt entire drive → Next.
12. In Choose encryption mode, keep New encryption mode selected → Next.
13. In the confirmation dialog, uncheck Run BitLocker system check → Continue.
14. The encryption progress appears; it can be closed but may be monitored later.
15. When encryption completes, click Close.