In the group policy editor if you go to:Computer Config>Administrative Templates>Windows Components>Bitlocker Drive Encryption and then select: "Configure recovery options It allows you to disable the password and only allow a key which is 256 bit. If I set it up this way, it still creates and allows a password. Is this not implemented yet or am I doing something wrong?