I am logged in as the above Administrator and when I open MMC and add the Certificates Snap-in I can see that I have a 'File recovery' certificate with the thumbprint '0123 4567 89AB.' which is 'enabled for all purposes'. When I look at the encryption details for these files it says that there is a recovery certificate for with the certificate thumbprint '0123 4567 89AB.'. The user that originally encrypted the files no longer exists. I have some files on the drive of a domain controller running Windows Server 2008 R2 which are encrypted via EFS.