On especially laptop's we have enrolled Bitlocker with extended passphraseduring boot which means that as soon as the laptop passes bios it will ask for the passphrase/key/pin.
MS self bypasses this during an upgrade but it would be nice if we could implement this feature (selectable) so that on patch reboot we don't have to call the customer to ask him to enter the password to continue working on the device.

https://learn.microsoft.com/de-de/previous-versions/windows/powershell-scripting/jj649830(v=wps.630)?redirectedfrom=MSDN