As a organization we’d like the ability to have the whole local OneDrive for Business folder encrypted, so that even if another administrator logs on, they wouldn’t be able to access the data. We can enable bitlocker for the hard drive but we cannot prevent the scenario with local admins, as they can just take ownership of the user profile folder.