I'm using Windows 10 Pro edition and took the following actions:
- I've set up Bitlocker on both disks using the TPM (2.0) to boot the computer.
- I've also set a Windows password and I have no guest account on my computer.
- I lock my session with Windows + L as soon as I leave my computer unattended.
I've read this as I was wondering about the point of TPM-based BitLocker if the disk gets decrypted automatically at boot time.
My main concern is about random computer loss or theft leading to data unauthorized access, not NSA-proof protection. Do I need to set up or config anything else?