We are currently using Basic EFS certificate for all domain users in our Domain 2003 Environment using Enterprise CA. However, By design, certificate is assigned and published in users AD account only when users try to encrypt any file/folder. Is it possible to have this certificate issued to all domain users without any users intervention i.e. without having users to encrypt any data. Regards Bharat RohillaMCSE Certified

Yes, this is the behavior by design. See details here: http://technet.microsoft.com/en-us/library/cc962118.aspx Please ask them her for more details: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threads This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer