Microsoft stores the hard drive encryption key in customers' online accounts by default. It can be accessed with a court order.