Browse by Tags

Tagged Content List

Wiki Page: AD RMS (Windows Server 2008 R2) and SQL Server 2012 Install Steps

Yagmoth555

Adding AD RMS on Windows Server 2008 R2 with a SQL Server 2012 backend is supported, but a hotfix (KB2619256) must be installed. The problem is that the hotfix will only install after some of the AD RMS components are installed. To get around this "Catch 22" situation, you can install using...

on22 Sep 2013
Wiki Page: AD RMS How To: Remove Obsolete Servers From the RMS Database

Maheshkumar S Tiwari

Previous RMS servers, old RMS v1 servers, failed AD RMS servers, and other scenarios may leave behind the RMS server name. This purely cosmetic artifact manifests in the AD RMS Servers tab on the properties tab of the Active Directory Right Management Services server. Example of the UI displaying...

on7 Sep 2013
Wiki Page: Troubleshooting the AD RMS Client

Maheshkumar S Tiwari

This article includes information about how to troubleshoot Active Directory Rights Management Services Client provisioning and connectivity issues. Essentially a summarized collection of the findings from the Rights Management Services Forum. This post will help you get started but it is not a comprehensive...

on5 Sep 2013
Wiki Page: How to Deploy AD RMS Policy Templates

Carsten Siemens

Table of Contents Method 1 - Using Group Policy with Office Administrative Templates Method 2 - Automatic AD RMS Rights Policy Template Distribution Method 3 - Manually copy the ADRMS Rights Policy Templates Method 4 - Offline Folders Method 1 - Using Group Policy with Office Administrative Templates...

on22 Aug 2013
Wiki Page: AD RMS Troubleshooting: Reset the Client (MSIPC)

Naomi N

In the course of troubleshooting the MSIPC rights management it may be beneficial to reset the client. The reset process removes the pertinent registry settings and files. This reset applies to the logged on user. Other users on the same machine are not reset. The steps are as follows. ...

on22 Aug 2013
Wiki Page: AD RMS Portal

Steve Light - MSFT

The following list is a community-driven list of TechNet Wiki articles on Active Directory Rights Management Services (ADRMS). Table of Contents ADRMS Overview ADRMS Design and Installation ADRMS Administration General Templates ADRMS How-to ADRMS Troubleshooting ADRMS & SharePoint ADRMS &...

on22 Aug 2013
Wiki Page: AD RMS Troubleshooting: Client-Side Tracing (MSIPC)

Naomi N

The latest rights management client, the one that is included in Office 2013 and may be downloaded separately is the Active Directory Rights Management Service Client 2.x . This client is also referred to as the MSIPC client. There are two logging features we may use to troubleshoot client side...

on21 Aug 2013
Wiki Page: AD RMS Troubleshooting: Client Side Tracing (MSIPC)

Steve Light - MSFT

This tracing/logging content applies to the new AD RMS client, Active Directory Rights Management Service Client 2.x . This client is also known as the MSIPC client. Office 2013 installs this client. Office 2013 offers additional application logging capabilities. This content utilizes both the...

on21 Aug 2013
Wiki Page: AD RMS Troubleshooting: Client-Side Tracing (MSDRM)

Steve Light - MSFT

One useful tool in troubleshooting an AD RMS issue on the client is tracing. All that is needed is a tool from Sysinternals, a registry change, and reproduce the issue. The following logging is for the MSDRM client. For information on logging for the MSIPC client please see AD RMS Troubleshooting...

on21 Aug 2013
Wiki Page: SharePoint Intergration with RMS

Gokan Ozcifci

Prereq steps: Make sure the user you are using to configure SharePoint has an email attribute in AD. Also make sure the SharePoint service account has an email attribute. Verify that RMS is functional outside of SharePoint by going into Microsoft Word under file\info\protect document\Restrict...

on16 Aug 2013
Wiki Page: AD RMS: Test-IRMConfiguration Command Fails with UnsupportedCryptographicSetException

Peter Geelen - MSFT

Situation Configuring Exchange 2010 IRM integration with AD RMS succeeds. Testing the configuration (with the Test-IRMConfiguration command) does not. Test-IRMConfiguration -Sender user1@contoso.com fails acquiring rights account certificate (RAC) and client licensor certificate (CLC). ...

on14 May 2013
Wiki Page: AD RMS Information: Resetting the Mac IRM client

Fernando Lugão Veltem

Let me preface this article with the following. This information is provided "as is" without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose. You see, I don't have a...

on10 May 2013
Wiki Page: Recovering AD RMS Templates After A URL Change

Fernando Lugão Veltem

For some folks it may be necessary to change the AD RMS certification and licensing URLs. For example one may need to remove the :433 from the URLs . While this change is fairly straight forward any existing rights policy templates existing before the change are invalid after the change (since the...

on8 May 2013
Wiki Page: AD RMS "Side Migration" with new SQL server

Fernando Lugão Veltem

This is a good method of doing a "Side Migration" while leaving the original servers in place. The steps upgrade from previous versions of RMS (ADRMS or RMSv1 SP2) while moving the database to a new server (presumably a newer version of SQL) at the same time. The following steps assume...

on8 May 2013
Wiki Page: Wiki: IT Security Portal

Charbel.Y

Information security is the process of keeping computers and networks protected from theft, corruption, unwanted publication, tampering, or natural disaster, while keeping the information and property accessible and productive to its intended users. This article contains links only to TechNet Wiki...

on28 Apr 2013
Wiki Page: AD RMS Troubleshooting: Reset the Client

Richard Mueller

In the course of troubleshooting RMS from the client side it may be beneficial to "start fresh." One may reset the registry and move/delete existing .drm files. The steps are as follows. Exit running Office applications. Delete existing registry entries. Clear existing licenses, GICs...

on26 Apr 2013
Wiki Page: Microsoft Rights Management Client Fix Information

Steve Light - MSFT

With the recent Windows 8 RTM I wanted to pull together a list of IRM related fixes. These are fixes for both the client and applications that utilize this functionality, primarily Office. Here are some notes about this information. This is not a complete list. I may have missed some. However...

on16 Apr 2013
Wiki Page: AD RMS Administrative Roles

Frank Boehle

Active Directory Rights Management Services (AD RMS) has three different administrative roles to help you better delegate control of your AD RMS environment. These roles are created the first time you install AD RMS in your organization. The AD RMS Enterprise Administrators group has full access...

on27 Feb 2013
Wiki Page: The AD RMS Service Connection Point

Richard Mueller

The Active Directory Rights Management Services (AD RMS) Service Connection Point (SCP) is an object in Active Directory that holds the web address of the AD RMS certification cluster. AD RMS-enabled applications use the SCP to discover the AD RMS service; it is the first connection point for users...

on7 Jan 2013
Wiki Page: AD RMS How To: Disable IRM Functionality for Some Office Applications

Fernando Lugão Veltem

An interesting question was posed to me. "How can I disable DRM for all my Office 2010 applications except for Outlook?" My initial reaction was that this is not possible. I know how to disable it for all Office applications on a client but not pick and choose. A few minutes with Bing and conferring...

on19 Oct 2012
Wiki Page: AD RMS Rights Policy Templates Best Practices

Martin_Sieber

Rights policy templates enable content authors to quickly apply a standard level of protection for content across your organization. Furthermore, templates offer additional security options that are not available in normal protection. If you are unfamiliar with rights policy templates read the TechNet...

on12 Oct 2012
Wiki Page: Unintended home realm discovery when using claims aware web agent

dplotnikov - mvp

Symptoms You may notice during a sign-in operation while accessing an application protected by a claims aware webagent, home realm discovery is forced despite providing whr parameter. Consider the following scenario. IDP STS <----> RP STS (AD FS 1.0 or 2.0) <-----> RP App ...

on2 Sep 2012
Wiki Page: AD RMS - Unable to connect using cluster name (AD RMS console)

Fernando Lugão Veltem

Symptom(s): Attempting to connect to the AD RMS cluster name in the Active Directory Rights Management Services Console results in the following error. The following Active Directory Rights Management Services dialog may appear. A connection with the AD RMS cluster "rms.contoso...

on30 Aug 2012
Wiki Page: AD RMS How To: Change the RMS Service Account Password

Fernando Lugão Veltem

The Active Directory Rights Management Services management console provides a wizard to change or update the AD RMS service account. The most common use for this process is to update the service account password when it has been changed. It is important to use this process to update or change the...

on17 Aug 2012
Wiki Page: AD RMS Console - "You cannot access the AD RMS administration service at this time"

Steve Light - MSFT

The Issue: Opening the Active Directory Rights Management Services Console fails with the following error. You cannot access the AD RMS administration service at this time. The IIS error log reports an IIS 500 error. Going to the certification URL fails with HTTP Error 500, error code 0x80070542...

on25 Jul 2012