Bitlocker

Windows 10 Enterprise comes with a built in encryption tool called Bitlocker. Managed computers with TPM will be encrypted by Chemistry IT before deployment.

Configuration Manager

For Chemistry IT in office uses, CM can create a report of which managed computers are currently encrypted: