This is why local account setup is so important on windows, and why microsoft makes it harder and harder each update.

or not use microsoft products for encryption