Trying to install bitlocker in our environment. Our problem is that we dont want laptops to go out into the field and have users there disable bitlocker. We have tried locking it down with GPO, but if you are a local admin, which many of our in-the-field people are, you can still turn off bitlocker. Has anyone come across this issue? How were you able to lock it down so that remote users could not disable or turn off Bitlocker?

nm. I found another board that says that as long as someone has local admin rights, it cant be stopped. Seems like a big hole in the design. Guardian Edge, Pointsec, PGP, all have ways to stop remote users from doing this unless they use a special account. But any local admin can remove Bitlocker it seems.