RMS: Protecting Your Assets.

KB: Installing Active Directory Rights Management Services fails with error ID 204

2013-01-09T17:40:47Z

Here’s a new KB we published on an issue where trying to install AD RMS fails with a 204 error. This normally is caused by corruption in the Service Connection Point and we have information on how to fix it in the article below: 2799251 - Installing Active Directory Rights Management Services fails with error ID 204( http://support.microsoft.com/kb/2799251 ) J.C. Hornbeck | Knowledge Engineer | Management and Security Division Get the latest System Center news on Facebook and Twitter : System Center...(read more)

An Expired SLC in AD RMS?

2012-09-07T18:39:12Z

In the world of technical support, issues seem to appear in clusters at times. I’ve just had a couple of issues where the AD RMS server licensor certificate (SLC) expired. The the olden days, as my kids call it, RMS v1 had an SLC with a two year validity. Hence it needed to be renewed every two years (renewing an SLC nowadays requires a workaround ). When you provision an AD RMS server (either fresh or upgrading from v1) the SLC is given a lifetime validity of over 250 years. Thus in AD RMS there...(read more)

Changing the RMS Service Account Password

2012-08-16T17:27:52Z

I had someone ask me how to best update the AD RMS service account password. As we started mulling over it we realized that this is more than just a domain account that we change the password in the services mmc. Some of this information may be in the AD RMS configuration database, there is a web application pool account, and so on. Poking around the AD RMS management console I found the “Change Service Account” wizard. Looking though this wizard it came across to me as what we use to change the...(read more)

Microsoft Rights Management Client Fix Information

2012-08-06T20:14:37Z

UPDATE (08/15/12): The new and maintained home for this information is on our wiki, here: Microsoft Rights Management Client Fix Information . With the recent Windows 8 RTM I wanted to pull together a list of IRM related fixes. These are fixes for both the client and Office. Here are some notes about this information. This is not a complete list. I may have missed some. However these are the fixes I encounter in my life as an RMS support person. The list assumes the latest service pack version is...(read more)

AD RMS Server Returns HTTP 500 (part 2)

2012-07-25T16:37:11Z

I am seeing more ways to get an HTTP 500 error out of IIS… I do want to go on record and point out that when IIS configurations prevent RMS from working it really isn’t an RMS issue. I concede the point that you don’t care why your RMS isn’t working, you just want it fixed. I’ll help as best I can. In earlier blog entries I pointed out two separate cases of the 500 errors when trying to get to the RMS server. SharePoint 2010 and IRM Integration AD RMS Server Returns IIS 500 Errors Both the...(read more)

AD RMS Server Returns IIS 500 Errors

2012-06-13T13:23:02Z

I’ve seen a rash of these cases recently. It’s ranged from not being able to configure IRM integration on SharePoint (hence my earlier post) to just about any client interaction with RMS server symptom. The client will report some error. The AD RMS server side is quiet. You have to dig into the IIS server logs on the AD RMS server to find the clue. In my SharePoint specific post (link below) we have errors similar to the following. GET /_wmcs/certification/servicelocator.asmx - 443 <snip> 500...(read more)

New Wiki Content–Removing Old RMS Servers

2012-06-11T20:39:31Z

Out of nowhere I get three different sources asking me how to clean up old servers out of the RMS infrastructure. I was hesitant to tell folks to go poking around in the RMS configuration database. However the edits are benign enough and we all back up our databases so I put it out there. In my opinion this is a purely cosmetic “issue.” In one place do you readily see the old servers referenced anywhere. It does not affect the functionality of the RMS infrastructure. Yet some feel this is important...(read more)

End of the UDDI Service and Server Ramifications

2012-05-08T14:56:32Z

This is from KB 2708963 Administrators receive a security warning and an error message when they try to perform some tasks for Windows Rights Management Services 1.0 for Windows Server 2003 Service Pack 2 The Universal Description Discover and Integration (UDDI) service is no longer available as of May 18, 2012. This affects RMS v1 servers in some scenarios. The above KB details the cause, effect, and resolution for this change. I just wanted to call out the scenarios, error messages, and show some...(read more)

AD RMS Wiki

2012-05-07T15:50:05Z

I wanted to call out the AD RMS wiki that a lot of us are working on. There is some great content from a varied source of authors. I know that we are working to push good content out. I know the format of the current page is not the greatest, and we’ll be cleaning that up. However we’ve added some good tidbits thus far. AD RMS Portal Some of the content I’ve been sending folks when troubleshooting RMS issues are the following. AD RMS Troubleshooting: Reset the client AD RMS Troubleshooting: Client...(read more)

RMS errors with XP IE7 and Office 2007

2012-05-04T20:44:06Z

Our RMS brother from Germany, Uwe, had the following RMS encounter. He wanted to share it on the blog. Recently had an interesting issue with a customer where Windows XP SP3 clients with Office 2007 SP2 were not able to create or consume RMS protected content. Some clients may receive the following error. Microsoft Office has detected a problem with your Information Rights Management configuration. Contact your administrator for more information. Looking into the DRM folder one could only see the...(read more)