Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Rights Management Services
server role installed.
The domain contains a domain local group named Group1.You create a rights policy template named Template1. You assign Group1 the rights to Template1. You need to
ensure that all the members of Group1 can use Template1.
What should you do?

A.
Configure the email address attribute of Group1.

B.
Convert the scope of Group1 to global.

C.
Convert the scope of Group1 to universal.

D.
Configure the email address attribute of all the users who are members of Group1.

Explanation:
When a user or group is created in Active Directory, the mail attribute is an optional attribute that can be set to
include a primary email address for the user or group. For AD RMS to work properly, this attribute must be set
because all users must have an email attribute to protect and consume content.
AD RMS Troubleshooting Guide
http://social.technet.microsoft.com/wiki/contents/articles/13130.ad-rms-troubleshooting-guide.aspx