Microsoft allows a system administrator to set a policy that requires the users
to enable Bitlocker encyption on any device before it can be written to. This is
a pretty foolproof system to ensure that company data is always encrypted
(except that you can always turn off encryption on a
