Your network contains an Active Directory domain named contoso.com. The domain contains an enterprise certification authority (CA). You plan to implement Encrypting File System (EFS) to encrypt data on the client computer of each user.
You need to recommend a solution to provide your company’s internal auditors with the ability to decrypt any encrypted files on the client computers.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
A. Add the auditors to the local Administrators group on each client computer.
B. Provide the auditors with access to a key recovery agent certificate.
C. Add the auditors to the Domain Admins group.
D. Provide the auditors with access to a data recovery agent certificate.
