Information
This policy setting controls whether a BitLocker-protected computer that is connected to a trusted wired Local Area Network (LAN) and joined to a domain can create and use Network Key Protectors on TPM-enabled computers to automatically unlock the operating system drive when the computer is started.
NOTE: Some queries in this .audit require BitLocker to be enabled in order to function properly.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure this setting in a manner that is consistent with security and operational requirements of your organization.