Encryption techniques engaged by Microsoft Windows are typically on password storage, NTLM sessions, and secure channel data.
Attackers are mostly successful in bypassing encryption, either by utilizing weaker cipher suites or disabling the feature itself.