Without a doubt Bitlocker. But it would be incredibly stupid to store anything of value on those machines, even with bitlocker. Security in depth. That is not a SIPR machine so anything of value should be on a separate domain accessible through secure VPN or something.