title: Adding EFS Data Recovery Agent (DRA) certificate programmatically by API
body: <p>I'm looking for a way to programmatically (any language) add a Data Recovery Agent (DRA) certificate for Encrypting File System (EFS) in Windows OS.</p>
  
  <p>Manually it's easy to perform by:
  gpedit.msc - Security Settings -> Public Key Policies -> Encrypting File System -> Add DRA;</p>
  
  <p>but I want to automate it (without using Active Directory Group Policies!).</p>
  
  <p>A command line solution would also be acceptable.</p>