Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2012.
All client computers are desktop computers running Windows 8. Users regularly log on to different
client computers.
A new company security policy states that files on client computers should be encrypted. To
comply with the security policy, you plan to implement Encrypting File System (EFS).
You install a server named TK-CA1. You install the Active Directory Certificate Services server
role on TK-CA1 and configure the server as an Enterprise Root Certification Authority (CA).
You want to configure the environment to ensure that users do not receive a different EFS
certificate on each client computer they log on to. You need to ensure that when a user logs on to
a client computer, their EFS certificate is downloaded to the client computer and when the user
logs off, the EFS certificate is removed from the client computer.
What should you do?

A.
You should configure Folder Redirection.

B.
You should implement Roaming Profiles.

C.
You should enable Credential Roaming.

D.
You should disable auto-enrolment on the EFS certificate template.