I have a Windows Server 2012 R2, Hyper V VM acting as a domain controller (for domain parihar.local). I am setting up EFS (Encrypted File System) on the same and am running into a very specific issue with Data Recovery Agents (DRA) accounts.
I am using 3 users here to login and test the EFS working. 3 Users are Administrator, maneesh1, deepak. I have set up the Default domain policy to add certificates of Administrator and Maneesh1 as DRA (data recovery agents) accounts.
I create and encrypt a plain text file with deepak account and then encrypt the same. The encryption details shows administrator and maneesh1 as DRAs. I log off from the VM. When I am logging into administrator account I am able to access the files being the DRA and i can even decrypt the same.
However when I am logging into the maneesh1 account I am not able to access or decrypt the file using cipher command or explorer.
I am using self signed certificates and have cross checked the certificate thumbprints of the DRA of the text file using cipher commands. the certificates bearing the same thumbprints are already installed.
Kindly help understand and resolve as to why the second DRA account of maneesh1 is not able to access and decrypt the encrypted file.
Thanks.Kindly let me know for any additional information required. Cannot attach more than 2 images will try and share more during replies if site allows.