EFS access via Active Directory user account

[kungpow200]

Hi,

I have the following
-win2k8 r2 standard domain controller/file server (no certification authority on this server or anywhere else. only have 1 server)

I can use a new laptop that's not part of the domain (no efs certificates) and access the file server by using an AD user account testuser1 by going \\server1\testfolder\ and I can access the encrypted files encrypted by user testuser1 only.

How is this possible? How am I getting the efs certificate to access the encrypted files by testuser1? I have no efs certificates in mmc -> certificates for testuser1 on the brand new laptop.

Am I getting the efs certificate via smb/cifs file share protocol in Active Directory? Where is the efs certificate located in active directory?

Thanks