https://www.grouppolicy.biz/2010/10/how-to-enable-a-disabled-local-administrator-account-offline-in-windows-7-even-when-using-bitlocker/