You have been tasked with ensuring that access to certain server managed resources is only available to client devices with TPM chips and BitLocker file security. What Windows Server role can be installed to automate this check?