You have an Active Directory Rights Management Services (AD RMS) cluster.
You need to prevent users from encrypting new content. The solution must ensure that the users can continue
to decrypt content that was encrypted already.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
From the Active Directory Rights Management Services console, enable decommissioning.

B.
From the Active Directory Rights Management Services console, create a user exclusion policy.

C.
Modify the NTFS permissions of %systemdrive%\\inetpub\\wwwroot\\_wmcs\\licensing.

D.
Modify the NTFS permissions of %systemdrive%\\inetpub\\wwwroot\\_wmcs\\decommission.

E.
From the Active Directory Rights Management Services console, modify the rights policy templates.

Explanation:
* Decommissioning refers to the entire process of removing the AD RMS cluster and its associated databases
from an organization. This process allows you to save rights-protected files as ordinary files before you remove
AD RMS from your infrastructure so that you do not lose access to these files.
Decommissioning an AD RMS cluster is achieved by doing the following:
/ Enable the decommissioning service. (A)
/ Modify permissions on the decommissioning pipeline.
/ Configure the AD RMS-enabled application to use the decommissioning pipeline.
* To modify the permissions on the decommissioning pipeline
1. Log on to ADRMS-SRV as cpandl\\administrator.
2. Click Start, type %systemdrive%\\inetpub\\wwwroot\\_wmcs in the Start Search box, and then press ENTER.
3. Right-click the decommission folder, and then click Properties.
4. Click the Security tab, click Edit, and then click Add. (D) Etc.
Step 1: Decommission AD RMS Root Cluster