ERROR: Network Unlock can only be disabled within the BitLocker Drive Encryption group policy setting "Allow network unlock ...

ERROR: Network Unlock can only be disabled within the BitLocker Drive Encryption
group policy setting "Allow network unlock at startup", or by removing the
Public Key Policies group policy setting "BitLocker Drive Encryption Network
Unlock Certificate" on the domain controller.