Awesome! Thanks for the research, seems like this could be the way, I was going to go down the Intel route just for work stuff, but that makes it a solid choice.
Thanks again, really appreciate the reply
OK, makes sense - so for an in tune enrolled device, we can implement full disk encryption without any the needs for a password?
But Windows 11 only, so FDE on Windows 10 would need a boot password?