Creating a local account after the fact and removing the MS account linked Windows account is another option. No need to mess with sysadmin tools for deploying Windows.