Auto Unlock Bit locker on Domain Joined PCs

[ITGURU]

A user has a USB stick that on any computer connected to the domain, it would automatically unlock whether the PC was logged on as the user, or any other user. It doesn't matter who is logged onto the PC on any PC in the school, the USB would auto unlock. However at home and on a standalone computer it would ask for the password.

 

having looked in the settings of manage bitlocker. Auto Unlock was turned off.

 

I can therefore only assume that as the computers are all domain joined, there's something stored in AD?

 

How do i remove this so that that the auto unlock no longer occurs as when i view the status in GUI or command line it says auto-unlock is disabled. - where am i looking for the setting to delete the entry/usb drive from always auto opening without a password?

 

As i ran out of time, i removed bitlocker and re-encrypted and then it asked for the password on every computer again.

 

Thanks.

[mavhc]

https://docs.microsoft.com/en-us/powershell/module/bitlocker/disable-bitlockerautounlock?view=win10-ps