Microsoft BitLocker provides full volume encryption for operating system volumes, as well as fixed and removable data volumes. You can use BitLocker to mitigate unauthorized data access on lost or stolen computers by encrypting all user files and system files on the operating system drive, including the swap files and hibernation files, and checking the integrity of early boot components and boot configuration data.
Before you enable BitLocker, refer to Microsoft's planning and policies guide (https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies).
Once you are ready to proceed, for instructions on how to install BitLocker on a desktop machine, refer to Microsoft's Basic Windows Deployment (https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-basic-deployment). For instructions on how to install BitLocker on a Server, refer to (https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-how-to-deploy-on-windows-server).