This is why local account setup is so important on windows, and why microsoft makes it harder and harder each update.
or not use microsoft products for encryption
or not use microsoft products for encryption