1)Yes it is possible
2)EFS Recovery Agents
By default, the local Administrator users account for the first domain controller that is installed in the domain is the EFS recovery account for that domain. You can specify alternative recovery agents for EFS. Use the Group Policy console to designate alternative EFS recovery agents by adding the EFS Recovery Agent certificates into Public Key Group Policy, which means you must first issue EFS Recovery Agent certificates to designated recovery agent user accounts on local computers.
When you are configuring the EFS recovery settings, you have two choices: you can add recovery agent certificates that are published in Active Directory, or you can add recovery agent certificates from a file thatis located on a disk or in a shared folder that is available from the computer where you are configuring Public Key settings. If you add recovery agent certificates from files, you must first export the appropriate certificates to the disk or sharedfolder that is to be used to add the files during the EFS recovery Group Policy configuration process.
To add an EFS recovery agent, in the Public Key Policies node, right-click Encrypted Data Recovery Agents, and then click Add. When the Add Recovery Agent wizard appears, add the appropriate recovery agent certificates by using the options described
here:
Options: Recovery agents
Description: Displays the certificates you choose for recovery agents.
______________________
Options: BrowseDirectory
Description: Browses Active Directory and adds a recovery agent certificate for a user account. Use this option when the certificate is published in Active Directory.
______________________
Options: Browse Folders
Description: Adds arecovery agent certificate from a file.
___________________________
Let me know if it solved your problem
den_itm@yahoo.com
Dmitriy
