Efsui.exe Efs Installdra

# Add DRA certificate to local machine EFS policy $cert = Import-Certificate -FilePath "\\share\DRA_RecoveryCertificate.cer" -CertStoreLocation Cert:\LocalMachine\EFS cipher /addagent /name "$($cert.Subject)"

Follow the Group Policy steps above. Without a DRA, EFS will still work, but you risk permanent data loss if the original user’s certificate is lost. efsui.exe efs installdra

: Specifies that the utility should perform an EFS-related task. /installdra : Instructs the system to install a Data Recovery Agent (DRA) # Add DRA certificate to local machine EFS