It automatically encrypts the drive only if admin has a Microsoft account (to backup the key on their cloud servers for easier LEO access data recovery) and the PC is a prebuilt

If one of the condition is not met, the automatic ransomware isn’t enabled

The decryption key is saved in the Microsoft account, the error message explains that

I also almost got a panic attack when my Lenovo updated the bios and i was locked out