Hi!
I've got a brand new Surface Pro 3 (connected to AD) and the Bitlocker (we want it in transparent mode) is in the state "Bitlocker waiting for activation". However, when I click "Turn on Bitlocker" it says "The startup options on this PC are configured incorrectly." So what should be done (yes, TPM is enabled)? I found instructions how to enable PIN prompt in Surface (https://social.technet.microsoft.com/Forums/en-US/5b3782d5-9bee-4cf0-be94-366dc09bb36a/surface-pro-bitlocker-error?forum=w8itprosecurity), but that doesn't help. Is this somehow AD-related thing, because of removing the device from AD allowed me to turn BL on with no problems.