Windows Hybrid Azure AD to auto enable Bitlocker

Hi All,

I have set up autopilot join hybrid AD, as well as bitlocker for configuration profiles, as shown in the picture. The test results show that if it is an AD Joined computer, bitlocker will be enabled after the user login, but bitlocker will not be enabled after the hybrid computer login. The account we are using is domain user. Is it related to account permissions?

My computer is Win 11 Pro 22H2, and both TPM and Security Boot are turned on.