You need to issue a certificate to users to meet the following requirements:  Ensure that the use

Your network contains an Active Directory domain named contoso.com. The network has an Active
Directory Certificate Services (AD CS) infrastructure.
You need to issue a certificate to users to meet the following requirements:
 Ensure that the users can encrypt files by using Encrypting File System (EFS).
 Ensure that all of the users reenroll for their certificate every six months.
What should you do first?

A.
From the properties of the User certificate template, assign the Allow -Enroll permission to the
Authenticated Users group.

B.
From the properties of the Basic EFS template, assign the Allow -Enroll permission to the
Authenticated Users group.

C.
Create a copy of the User certificate template, and then modify the extensions of the copy.D. Create a copy of the Basic EFS certificate template, and then modify the validity period of the copy.

Explanation:

http://technet.microsoft.com/en-us/library/cc786499(v=ws.10).aspx