I've been tasked to look into encrypting the considerable number of laptops our school division has and bitlocker is the obvious choice as we are a microsoft shop but I have no real experience ...

We've been deploying BitLocker on our laptops for almost two years now, setting Group Policy to escrow the TPM and BitLocker recovery keys in the AD computer object. This has worked fine for us ...

4] Check the Active Directory For business/enterprise devices joined to a company domain, BitLocker recovery keys are often automatically backed up to Active Directory (AD) as a security policy.

The BitLocker security feature is available on Windows 11 Pro, Enterprise, and Education editions. However, on Windows 11 Home, you can use "device encryption," a limited version of BitLocker.