Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,331 questions
Prevent users from creating EFS certificates?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 27%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
Hello, We have a Windows enterprise root CA that is joined to the domain and from time to time I am seeing Basic EFS certificates be issued to end users. I'm not nearly as familiar with Windows certificate services as I'd like to be. Can anyone explain to me what end users are doing to obtain these certificates in the first place?
Also, if I wanted to prevent users from obtaining these certs, how would I do that?
