Bitlocker computer lock?

Question

bitlocker

Good day everyone,
I ask for help with Bitlocker involved and sympathizers.
there is an idea to lock the computers of some employees through Bitlocker in some scenarios. For example, if an employee did not hand over the computer on the date of dismissal, then it makes little sense to block his account in AD, because. the user may be offline at the time of blocking the AD account. So the question is how to implement it?
1) A certain script that would be sent centrally via SCCM to computers of the "risk group" and Bitlocker blocking of this computer was called through the scheduler
2) Is it possible to make it so that there is an algorithm so that when the computer is turned on, it always requests a Recovery Key?
3) While writing, I realized that using a command like manage-bde -cn %pc_name% -lock c: will not help, the computer is not online.
I ask for help, advice. Thanks for taking the time, I really appreciate it.