For the local admin account only — first-time setup, and if Microsoft sign-in ever stops working. Everyone else signs in above.