Jva Basico

[pic]


Removing Active Directory Rights Management Services Step-by-Step Guide

Microsoft Corporation
Published: March 2008
Author: Brian Lich
Editor: Carolyn Eller

Abstract
This step-by-step guide provides instructions for modifying a test environment to decommission and remove Active Directory Rights Management Services (AD RMS) within your organization.
[pic]This document is provided for informational purposes only and Microsoft makes no warranties, either express or implied, in this document. Information in this document, including URL and other Internet Web site references, is subject to change without notice. The entire risk of the use or the results from the use of this document remains with the user. Unless otherwise noted, the examplecompanies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights undercopyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectualproperty rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

© 2008 Microsoft Corporation. All rights reserved.

Microsoft, Active Directory, MS-DOS, Windows, Windows NT, andWindows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

All other trademarks are property of their respective owners.


Contents


Decommissioning Active Directory Rights Management Services Step-by-Step Guide 5
About This Guide 5
What This Guide Does Not Provide 5
Deploying AD RMS in a Test Environment 5Step 1: Decommission AD RMS Root Cluster 7
Enable the decommissioning service 7
Set permission on the decommissioning pipeline 8
Configure the AD RMS-enabled application to use the decommissioning pipeline 9

Step 2: Verifying AD RMS Functionality 9
Decommissioning Active Directory Rights Management Services Step-by-Step Guide


About This Guide

This step-by-step walks you throughthe process of decommissioning Active Directory Rights Management Services (AD RMS) in your organization. Removing AD RMS requires that all rights-protected content that you want to be able to use be decrypted before all servers are removed from the AD RMS cluster.
Once complete, you can use the test lab environment to learn about AD RMS decommissioning on Windows Server® 2008 and assess howit might be deployed in your organization.
As you complete the steps in this guide, you will:
• Decommission an AD RMS cluster.
• Verify the removal of AD RMS functionality after you complete the configuration.
This guide assumes that you previously completed the steps in the Windows Server Active Directory Rights Management Services Step-by-Step Guide(http://go.microsoft.com/fwlink/?LinkId=72134), and that you have already deployed the following components:
• An AD RMS server
• An AD RMS database server
• One AD RMS-enabled client
• One Active Directory domain controller

What This Guide Does Not Provide

This guide does not provide the following:
• An overview of AD RMS. For more information about the advantages that AD RMS can bring to your organization, see...