I am the new Admin taking over for a “rogue” Admin who was fired. In exploring/evaluating the company environment I discovered that the former admin has set the EFS Recovery Agent in the Default Domain GPO to be a certificate in his name only. (Inthe haste to fire the former Admin his account was deleted.) The documentation is vague as to how to best replace this. Any links to good doco on the subject would be appreciated.