$TPMStatus = Get-Tpm
if ($TPMStatus.TpmPresent -and $TPMStatus.TpmVersion -eq "2.0") {
    $SATAVolumes = Get-PhysicalDisk | Where-Object MediaType -eq "Unspecified" | Get-Disk | Get-Partition | Get-Volume
    foreach ($Volume in $SATAVolumes) {
        $BitLockerStatus = Get-BitLockerVolume -MountPoint $Volume.DriveLetter
        if ($BitLockerStatus.VolumeStatus -ne "FullyEncrypted") {
            Enable-BitLocker -MountPoint $Volume.DriveLetter -UsedSpaceOnly -SkipHardwareTest -RecoveryPasswordProtector
        }
    }
}