Hi,
Like the title says, we have enabled EFS on our clients years ago and the administrator enabling has left and none now seem to know which computers are using EFS today.
We have GPO´s in each of our 4 domains with the recovery agents included.
We are also running offline files, some sites seem to have the setting in a user GPO which states that EFS should be disabled and some enabled.
Allow users to encrypt files using Encrypting File System (EFS)
Encrypt the contents of the user's Documents folder
We want to start using BitLocker instead of EFS.
The enterprise has approx 10,000 clients in 200 sites around the world.
What would be the best way to proceed?
What pre-req is there? Is the recovery agents public certificate a requirement from the GPO´s?
Anything else?
Regards
Niklas