Windows server Domain Encryption

[lior1111]

Hey guys , I am not sure if this is the right place to ask this , but i need help with my Windows server 2016 Active directory domain lab.
I want to have a folder on my domain that is open for sharing and security for everyone , have a user from a client computer create an encrypted file there .
I can see that it is possible , and that other users cant enter the file even if they are on the same machine. 
My issue comes when I want to share the encrypted file with another user , because a simple user from a simple machine cannot have access to domain level certificates , ( or can he? i cannot find even the own user domain level certificate thumb prints) even of his own , which means he cannot share another user with his domain level certificates other than in the way of asking the administrator for him to add the user to the encrypted file sharing.
Is there a way for a user to share a domain level encrypted file on his own? or the only way for him to do that is asking the administrator?
thank you.