https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings?redirectedfrom=MSDN#bkmk-driveaccess2