On Windows devices, its easy to break domain trust after a certain
period of time, and I understand the impact that will have on the
device. This makes it easier to protect data on old machines that a
random associate might decide to "keep" after it ...