And you are not going to with a small system builder. Most probably don’t use the preinstall sysprep method and the few that do will not want to support BitLocker and will make sure it’s turned off. Only the big OEMs have it turned on by default because M$ sells them cheaper if they do.