Also: don’t trust your employees to boot into safe mode.
Trust a 3rd party to freely install system level files at any time.
I knew how to fix the computers at work today in the morning, but we couldn’t get through to the help desk to get the bit locker codes for each computer until near the end of the day.
Looks like you’re the one that needs their hand held.