I am getting a new laptop soon which comes stock with 2x128GB Raid0 for the primary partition with Windows 8 Pro installed on it. It also has a 1TB hard drive for storage stuff. My question is that I will at times be using the laptop for some personal stuff. In the event that I were to be fired (or something unexpectedly terminated), I would gracefully return the laptop. The company is due back their property, both physical and digital. However, the personal stuff (pictures of my daughter, some Word Documents, etc.) I would not want them to have access to. Since I would be giving the laptop back in a moments notice, I would want to ensure that my data (which would reside on the 1TB drive) would be encrypted so that the Network Admins or anyone wouldn't be able to access the data.
I'm thinking about just relying on TrueCrypt which has served its purposes in the past very well. With modern CPUs supporting AES, it is very minimal performance impacting. I could just rely on the TrueCrypt and encrypt the whole 1TB hard drive. Assuming that I'm using a complicated passphrase, would you imaging that my personal data (as far as the IT staff were concerned is gone or pointless to try to recover)?
Based on the answer of the first potential solution being that it would take too much effort to hack a encrypted drive, what about another potential solution; BitLocker? My fear about BitLocker was that since the computer would be part of the Domain Controller (unsure what version of Windows Server), would the System Administrators be able to disable/decrypt the Bitlocker without having known the passphrase? Since they would have full access to the primary OS and this laptop would be joined to their domain, would they have "override" capabilities to send a decrypt command that would grant access to the personal data on the 1TB drive?