DRAG DROP
Your network contains two Active Directory forests named contoso.com and adatum.com. Each
forest contains an Active Directory Rights Management Services (AD RMS) root cluster. All servers
run Windows Server 2012 R2.
You need to ensure that the rights account certificates issued in adatum.com are accepted by the AD
RMS root cluster in contoso.com.
What should you do in each forest?
To answer, drag the appropriate actions to the correct forests. Each action may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer: 
Explanation:
A trusted user domain, often referred as a TUD, is a trust between AD RMS clusters that instructs a
licensing server to accept rights account certificates (the certificates identifying users) from another
AD RMS server in a different Active Directory forest. An AD RMS trust is not the same as an Active
Directory trust, but it is similar in that it refers to the ability of one environment to accept identities
from another environment as valid subjects.
Illustration:
Trusted User Domain
Trusted user domains . The addition of a trusted user domain allows the AD RMS root cluster to process requests for client licensor certificates or use licenses from users whose rights account certificates (RACs) were issued by a different AD RMS root cluster. You add a trusted user domain by importing the server licensor certificate of the AD RMS cluster to trust
Obviously to be able to import the certificate it needs exporting from the other domain first.
0
0
correct
0
0