We have a GPO which requires a TPM for BitLocker. PINs and USB keys are explicitly disallowed. Because of this and Windows to Go's requirement of a PIN, will domain joined WTG drives run into issues? My assumption is yes but I wanted to verify and see if anyone has any ideas on how to deal with this other than a separate OU for the WTG clients.