To back up your EFS certificate

1. Open Certificate Manager by clicking the Start button Picture of the Start button , typing certmgr.msc into the Search box, and then pressing ENTER.‌
2. Click the arrow next to the Personal folder to expand it.
3. Click Certificates.
4. Click the certificate that lists Encrypting File System under Intended Purposes. (You might need to scroll to the right to see this.)
   If there is more than one EFS certificate, you should back up all of them.
5. Click the Action menu, point to All Tasks, and then click Export.
6. In the Export wizard, click Next, click Yes, export the private key, and then click Next.
7. Click Personal Information Exchange, and then click Next.
8. Type the password you want to use, confirm it, and then click Next.
9. The export process will create a file to store the certificate.
   Enter a name for the file and the location (include the whole path) or click Browse and navigate to the location, and then enter the file name.
10. Click Finish.

Continue…

When setting up Remote Desktop in Windows 7 (Win7), you can choose whether to use Network Level Authentication (NLA) or not. NLA will probably enhance the security of your Win7 machine. However, after enabling NLA, your Win7 will be accessible only from another Win7 or Windows Server 2008 which supports NLA in the operating system level. To connect Win7 from WinXP, you should choose “Allow connections from computers running any version of Remote Desktop (less secure)” in the “Remote Desktop” panel, or you can activate NLA in case you are using WinXP sp3. The details are posted here, but the essence of the how-to is like the following.

1. Click Start, click Run, type regedit, and then press ENTER.
2. In the navigation pane, locate and then click the following registry subkey:
3. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LsaIn the details pane, right-click Security Packages, and then click Modify.
4. In the Value data box, type tspkg. Leave any data that is specific to other SSPs, and then click OK.
5. In the navigation pane, locate and then click the following registry subkey:
6. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProvidersIn the details pane, right-click SecurityProviders, and then click Modify.
7. In the Value data box, type credssp.dll. Leave any data that is specific to other SSPs, and then click OK.
8. Exit Registry Editor.
9. Restart the computer.