Network Unlock can only be disabled within the BitLocker Drive Encryption group policy setting "Allow network unlock at startup", ...

Network Unlock can only be disabled within the BitLocker Drive Encryption group policy setting "Allow network unlock at startup", or by removing the Public Key Policies group policy setting "BitLocker Drive Encryption Network Unlock Certificate" on the domain controller.