Adrms Under Multiple Forest Scenarios

Microsoft Virtual Labs
®

Implementing AD RMS Under Multiple Forest Scenarios

Implementing AD RMS Under Multiple Forest Scenarios

Table of Contents
Implementing AD RMS Under Multiple Forest Scenarios ....................................................... 1
Exercise 1 Implementing and Configuring AD RMS Multiple Forest with TUD between Contoso Corp and Litware Corp...............................................................................................................................................................................3 Exercise 2 Configure Active Directory to Implement AD RMS under Multiple Forest Corporate Environment .........6

Implementing AD RMS Under Multiple Forest Scenarios

Implementing AD RMS Under Multiple Forest Scenarios
ObjectivesAfter completing this lab, you will be better able to: Configure Microsoft® Active Directory® Rights Management Services (AD RMS) under Multiple Forest Environment Configure Microsoft® Active Directory® Rights Management Services (AD RMS) under Multiple Forest Environment with a centralized AD RMS Licensing Server NW Traders has two international subsidiaries: Contoso Corp and Litware. Contoso is aJet Engines research and development company with focus in Latinamerica and Litware Corp is an electronic components developer for EMEA. Due to the geographic dispersion each company has its own Domain forest and AD RMS infrastructure. Nevertheless the IT has been asked to standardize the RMS service across companies to protect sensitive corporate information. As the IT manager you have decidedto centralize the AD RMS templates as well as the licensing issue process between Contoso and NW Trades. Due to bandwidth limitations, only NW Traders and Contoso have a Site to Site VPN. Litware has just one link to Internet with no VPN capabilities to the other organizations. With these characteristics you are proposing the following design to the connection method among the different domains:Scenario

Page 1 of 12

Implementing AD RMS Under Multiple Forest Scenarios

Estimated Time to Complete This Lab Computers used in this Lab

60 Minutes

LITWARESRV01

CONTOSOSRV01

LITWARECLT01

NWTSRV01

NWTSRV05 NWTSRV02

CONTOSOCLT01

NWTCLT01 The password for the Administrator account on all computers in this lab is: Str0ngPassw0rd

Page 2 of 12

Implementing ADRMS Under Multiple Forest Scenarios

Exercise 1 Implementing and Configuring AD RMS Multiple Forest with TUD between Contoso Corp and Litware Corp
Scenario
Contoso needs to collaborate and exchange secured information with Litware experts in the design and development of critical components for the new Jet prototype. Contoso has required Litware that every document related with this projectmust be protected in order to mitigate the risk of information leakage. In these labs, you will learn how to deploy AD RMS Trusted Users Domain (TUD) trust between the two companies in order to achieve Contoso and Litware business requirements. Tasks Complete the following tasks on:
LITWARESRV01

Detailed Steps
a. Log on to LITWARESRV01 as Litware\Administrator with the passwordStr0ngPassw0rd
b. Select Start | Administrative Tools and click on Active Directory Right

Management Service.
c. Expand the AD RMS cluster, and then expand Trust Policies. d. Click Trusted User Domains, right-click the certificate named Enterprise, and then

1.

Export a trusted user domain

click Export Trusted User Domain.
e. In the File name box, type C:\LitwareTUDcer.bin and click Save.Note: The exported file just includes your AD RMS Public key, NO Private key material is contained on this file.
f. Open Windows Explorer and browse C:\ g. Select the LitwareTUDcer.bin, right click over there and click on Sent To,

Compressed (zipped) Folder
h. Click Enter on the default name i. Open Microsoft Outlook Web Access by typing https://mail.litware.com/owa in the j. k. l. m. n. o....