recovery agent

[Guest]

hi,
I need useful information about Recovery Agent(for example,How I can use a
certificate when choosing a user as a recovery agent).
I also would like to know how I can use recovery agent in a single computer.
Thanks
arian

 

[Roger Abell]

Have you yet read through
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx
If so, then do you have specific questions?
Note that there are some differences based on what
Windows version you are using.

 

[Steven L Umbach]

For Windows 2000 a RA can be configured via security policy for the domain
or Organizational Unit level. Windows 2000 [not Xp Pro] will automatically
assign a RA to a stand alone computer being the built in administrator
account when the first file is encrypted with EFS on that computer. For
domain computers, the configuration of RA is more complex. Be very careful
with EFS. It is like a gun that it can protect you or shoot yourself in the
foot [or worse] if the user is not trained properly. The link below is about
EFS best practices including the need to ALWAYS backup your EFS private key
to a password protected .pfx file.. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316