Journal The Surface comes partitioned with a 3.5GB recovery partition, which can fully reset the device including drivers, OS updates, full volume encryption + losing the recovery key, and people running amok with Admin permissions (assuming they do not mess with the recovery volume itself).