Deleting Users from Active Directory

[airbourne]

I have been deleting users that no longer work for our company. I disable for 30-60 days, then delete the account after that in Active Directory.

My question is why would I ever need to keep them? Do they have anything to do with EFS?

As an admin, can't I simply get access to any files they were working on at any time (taking ownership and setting permissions of course).

We, as a company do not use EFS. Is it possible for a user to set it up themselves on their local computers without us ever knowing? If so, how would we ever got those files back, if that domain user account was deleted?

 

[intelwizrd]

i believe that as long as the permissions and roles concerning data recovery have not been modified, you should be able to take control of them and unencrypt them.

the domain admin should be able to do this by default.

 

[intelwizrd]

this should help you out if you have other questions.

http://www.microsoft.com/windows200...chinfo/reskit/en-us/distrib/dsck_efs_duwf.asp