If you enable this policy setting, all new BitLocker startup PINs set will be enhanced PINs. Not all computers may support enhanced PINs in the pre-boot environment. It is strongly recommended ...
When you first set up a new machine and log in with a local account, you’ll be prompted to sign in with a Microsoft account ...
How many times have you been locked out of your PC because you accidentally spammed the wrong PIN or exceeded the max number of sign-in ... until the BitLocker Recovery screen is activated.
Facepalm: BitLocker is a full volume encryption feature ... Lambertz was able to "repurpose" the bitpixie bug using the controversial Secure Boot technology to load an outdated Windows bootloader.