Please don't enforce this. This makes it impossible to migrate profiles between OSes and requires users to care about DPAPI (or the corresponding alternative) for Backups. In the end a compromised computer is not protected any better than with the cu...
