BitLocker allows you to fully encrypt drives. It can be enabled so that it protects drives before boot. It also allows administrative recovery keys. However, sometimes it can go wrong.
