It automatically encrypts the drive only if admin has a Microsoft account (to backup the key on their cloud servers for easier LEO access data recovery) and the PC is a prebuilt

If one of the condition is not met, the automatic ransomware isn’t enabled