Configuring Windows 7 (Training Kit) - Part 49. This training kit is designed for IT professionals who operate in enterprise enviroments that use Windows 7 as a desktop operating system. You should have at least one year of experience in the IT field, as well as experience implementing and administering any Windows client operating system in a networked environment. | because they are encrypted. You are able to encrypt a file to another user only if that user has an EFS certificate in the computer s store. If you want to encrypt a file to another user and are unable to locate their certificate you need to get her to log on to the computer and encrypt a file. Once she does this her EFS certificate is published to the computer store and you are able to use it to encrypt files to their account. Although EFS allows you to encrypt individual files to multiple user accounts it does not allow you to encrypt folders to multiple user accounts. It is also not possible to encrypt files to a group only to multiple but separate individual users. NOTE EFS IN DOMAIN ENVIRONMENTS Active Directory Certificate Services allows the centralized management of EFS certificates in a domain environment. Because the 70-680 exam is primarily concerned with the client running Windows 7 so you will not need to be familiar with integrating EFS with AD DS. EFS Recovery Recovery Agents are certificates that allow the restoration of EFS encrypted files. When a recovery agent has been specified using local policies all EFS encrypted files can be recovered using the recovery agent private key. You should specify a recovery agent before you allow users to encrypt files on a client running Windows 7. You can recover all files that users encrypt after the creation of a recovery agent using the recovery agent s private key. You are not able to decrypt files that were encrypted before a recovery agent certificate was specified. You create an EFS recovery agent by performing the following steps 1. Log on to the client running Windows 7 using the first account created which is the default administrator account. 2. Open a command prompt and issue the command r recoveryagent 3. This creates two files and . prompts you to specify a password when creating . 4. Open the Local Group Policy Editor and .
