I'm currently doing a 30day trial of M365 as I try to get my self familiar with this new ecosystem. I've managed to configure Intune and Autopilot to a point where I can enrol a new machine from OOBE. I've used the builtin
"Deploy Windows 10 in cloud configuration" Guided Scenario to create all the necessary things.
I noticed that after joining a machine, it turns on BitLocker. My issue is that I can't find where Intune or Autopilot tells the newly joined machine that it should turn on BitLocker and what settings it should use. There is no Device configuration Profile set that does this, the only mention of BitLocker I found is in the Security Baseline but in here it just specifies the BitLocker removable drive policy.
Any tips on how I can figure out where BitLocker is being turned on?