To modify the default recovery policy for a domain, you must log on to the first domain controller as an administrator. Then, start the Group Policy MMC through the Active Directory Users and Computers snap-in, right-click the domain whose recovery policy you wish to change, and click Properties. At this point, you click the recovery policy you wish to change and click Edit. In the console tree, click Encrypted Data Recovery Agents. Finally, you right-click the details pane and click the appropriate action you wish to take.
Was this article helpful?