Re: WG bans
Not at all correct. Windows does not use a certificate it uses public key encryption in conjunction with symmetric key encryption. These keys are tied to you Windows User Certificate (aka UserID)
From https://technet.microsoft.com/en-us/library/cc962103.aspx
The file encryption key (FEK) — a symmetric bulk encryption key — is used to encrypt the file and is then itself encrypted by using the public key taken from the user’s certificate, which is located in the user’s profile. The encrypted FEK is stored with the encrypted file and is unique to it. To decrypt the FEK, EFS uses the encryptor’s private key which only the file encryptor has.
We try not to get into too low level of detail here as most people would not understand what a certificate is and it would add no value.