How to simplify and make more easier managing access rights for files and folders and their inheritance? Take a note to use popular and useful script File System Security PowerShell Module.
security - B-blog.info
When you have your Active Directory Certification Services (ADCS), your domain users can have certificates used to encrypt\decrypt emails. Your security department may want to get access to those encrypted emails, so you must provide private key of this user, so security-people can decrypt messages.
How can you do that?
In some cases you may want to revoke certificate and then check on client computer that the certificate is invalid.
Because of caching of CRLs and OCSP in Windows operating systems, this will not be available until you clear CRL and OCSP cache.