A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8.
Some computers have a Trusted Platform Module (TPM)chip.
Members of the ITStaff security group are part of the local Power Users group on each client computer.
You need to configure a single Group Policy object (GPO) that will allow Windows BitLocker Drive Encryption
on
all client computers by using the least amount of privilege necessary.
Which commands should you run?
(To answer, drag the appropriate command or commands to the correct location or locations in the answer
area. Commands may be used once, more than once, ornot at all. You may need to drag the split bar between
panes or scroll to view content.)

Answer:

Explanation:

http://technet.microsoft.com/en-us/library/ee706521(v=ws.10).aspx