An organization uses an Active Directory Rights Management Services (AD RMS) cluster named RMS1 to protect content for a project. You uninstall AD RMS when
the project is complete.
You need to ensure that the protected content is still available after AD RMS is uninstalled.
Solution: You enable the decommissioning service by using the AD RMS management console. You grant all users the Read & Execute permission to
the decommission pipeline.
Does this meet the goal?
A.
Yes
B.
No
Explanation:
The proper procedure is:
Inform your users that you are decommissioning the AD RMS installation and advise them to connect to the cluster to save their content without AD RMS protection.
Alternatively, you could delegate a trusted person to decrypt all rights- protected content by temporarily adding that person to the AD RMS super users group.
After you believe that all of the content is unprotected and saved, you should export the server licensor certificate, and then uninstall AD RMS from the server.
This should be, B: NO
To have AD RMS content available after uninstall, you must first tell your users to save their AD RMS content without protection, then DECOMMISSION the AD RMS Cluster, not simply uninstall.
0
1
dude, stop fucking commenting with wrong bulshit explanations you’ve learned from some stupid ass dump. The explanation fully explains everything and your annoying comment doesn’t help at all people. Answer is correct. Please, STFU…
https://technet.microsoft.com/en-us/library/cc771071(v=ws.10).aspx
0
1
Funny, you’re on the same website and you’ve obviously gotten here the same way 🙂 You must be a joy in person…
2
0
To decommission ADÂ RMS
Log on to the server on which you want to decommission ADÂ RMS.
Modify the access control list (ACL) on the decommissioning.asmx file by granting the Everyone group Read & Execute permissions. The default location for this file is %systemdrive%\inetpub\wwwroot\_wmcs\decommission.
Open the Active Directory Rights Management Services console and add the ADÂ RMS cluster.
Expand the ADÂ RMS cluster, expand Security Policies , and then select Decommissioning .
Select the Enable Decommissioning option in the Actions pane.
Click Decommission .
When prompted, click Yes to confirm that you want to permanently decommission the ADÂ RMS installation.
Repeat steps 1–7 for all AD RMS servers in the cluster.
Inform your users that you are decommissioning the ADÂ RMS installation and advise them to connect to the cluster to save their content without ADÂ RMS protection. Alternatively, you could delegate a trusted person to decrypt all rights-protected content by temporarily adding that person to the ADÂ RMS super users group.
After you believe that all of the content is unprotected and saved, you should export the server licensor certificate, and then uninstall ADÂ RMS from the server.
0
0
so answer is yes
2
0
The other way of decommissioning AD RMS is
At the Windows PowerShell command prompt, type:
Set-ItemProperty -Path :\ -Name IsDecommissioned -Value $true -EnableDecommission
where is the name of the Windows PowerShell drive.
This is done without the interface. and then after everyone has unprotecting their shit you can uninstall the AD RMS
0
0