[kopija]

Autor tomek@vz

ardware/design/device-experiences/oem-bitlocker#disable-bitlocker-automatic-device-encryption

I dalje mi nije jasno zašto se enkriptirao ničim izazvan.
S gornjeg linka citat:

BitLocker automatic device encryption uses BitLocker drive encryption technology to automatically encrypt internal drives after the user completes the Out Of Box Experience (OOBE) on devices that meet hardware requirements.
Note
BitLocker automatic device encryption starts during Out-of-box (OOBE) experience. However, protection is enabled (armed) only after users sign in with a Microsoft Account or an Azure Active Directory account. Until that, protection is suspended and data is not protected. BitLocker automatic device encryption is not enabled with local accounts, in which case BitLocker can be manually enabled using the BitLocker Control Panel.

Izgleda da su OEM mašine (ili samo laptopi?) izuzetak od tog pravila.
Mislim da je do tog "secure by default" pristupa, Microsoft misli da je korisnik tumplek pa uključi bitlocker za njegovo dobro.
Poznavajuć prosječne korisnike, hvalevrijedan potez.