The Microsoft Bitlocker Administration and Monitoring (MBAM) policy for machines in the CN domain has been updated to not require a PIN by default. This has no impact on existing MBAM configurations (e.g. it isn’t going to clear out the existing PIN), but it does mean that an existing install with a PIN can be changed to a blank PIN.

As a reminder, a general overview of all our fleetwide group policy objects is available here