Configure Encrypting File System
Welcome to the "Configure Encrypting File System" Practice Lab. In this module you will be provided with the instructions and devices needed to develop your hands-on skills.

Introduction
Welcome to the Configure Encrypting File System Practice Lab. In this module you will be provided with the instructions and devices needed to develop your hands-on skills.
Learning Outcomes
In this module, you will complete the following exercises:
- Exercise 1 - Manage EFS in a Windows Active Directory Domain
After completing this lab, you will be able to:
- Enable EFS on domain-joined Windows computers
Exam Objectives
The following exam objectives are covered in this lab:
- Understand encryption - Understand Encrypting File Systems (EFS)
Lab Duration
It will take approximately 60 minutes to complete this lab.
Exercise 1 - Manage EFS in a Windows Active Directory Domain
Encrypting File System (EFS) is a security feature built into Windows that helps secure personal folders and files on a workstation. This is in contrast with BitLocker Drive Encryption that encrypts the entire disk both system and data volume.
Managing EFS for Windows devices attached to an Active Directory Domain is easier as you can use Group Policy to control the network environment, and enhance the recovery of encrypted objects protected by this encryption technology.
In this exercise, you will learn how to enable a user account as an EFS recovery agent. An EFS recovery agent is a privileged user account that can decrypt folders and files that were left behind by network users. It is essential that an EFS recovery agent is designated first before allowing users to encrypt files on their workstations.
See the full benefits of our immersive learning experience with interactive courses and guided career paths.