I wonder how Bitlocker works.

If you copy data to an encrypted volume, boot into nastyOS and try & read the data - if you know your company assigned login & password than surely thats enough to copy the files off?

Or is there policies available for say only the computer's system service only able to decrypt the filesystem or something?

I wonder if it'd be possible still to place the super-secret.doc file on a non-encrypted volume while using Vista, such as a email inbox, and then boot into nastyOS and download the files.

Interesting puzzle.