Microsoft expands BitLocker management capabilities for the enterprise

Option 4 - free of cost :) We have enabled BitLocker on our Windows 10 Pro machines without any of these tools with a GPO which runs a PowerShell script (via task scheduler), which enables encryption on the next startup without any prompts. Of course, no proper monitoring or keys rotation, but one can have a script that scans all computer objects in AD and checks if they have BitLocker key stored in their account. Not ideal. But we were able to quickly enable BitLocker and encrypt all our laptops without having to invest in new licenses/infrastructure.