@jmhatch
Hi,
You can't require one form and allow the others. If it's a single machine, just pick the one you want (PIN and TPM) and disable the others, either you "allow" each option so you can choose which one when you set Bitlocker on
BitLocker Group Policy settings can be accessed using the Local Group Policy Editor and the Group Policy Management Console (GPMC) under Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption.
Policy path:Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives
For your reference:
Hope above information can help you.
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.