[orillian]

Just an aside: I'm running Windows 10 Pro and Bitlocker is off for all 4 of the drives in my machine. This machine was setup from a fresh install of windows 10 shortly after it went live in July. Only a single data point, but apparently there are cases when Microsoft does NOT encrypt the drives.

[scholia]

Disk encryption is enabled on some shipping machines, which is to say, it has been enabled on the three brand new Windows 10 machines I've used. The OEM is responsible for the installation, so I'd assume this is an OEM choice, but obviously I don't know.

I didn't notice at first, and really, there's no reason why I should have noticed. Also, I assumed Windows 10 Home didn't come with BitLocker anyway.

The Windows 10 security overview on Microsoft TechNet includes the following statements:

"Modern Windows devices are increasingly protected with device encryption out of the box and support SSO to seamlessly protect the BitLocker encryption keys from cold boot attacks."

"BitLocker supports encrypted hard drives with onboard encryption hardware built in, which allows administrators to use the familiar BitLocker administrative tools to manage them."

https://technet.microsoft.com/en-us/library/mt601297%28v=vs....

[scholia]

> Also, I assumed Windows 10 Home didn't come with BitLocker anyway.

Apparently it's "device encryption" but it's not BitLocker. And while it's optional at the moment, it becomes compulsory in summer 2016.