Your network contains an Active Directory domain named contoso.com.
A previous administrator implemented a Proof of Concept installation of Active Directory Rights
Management Services (AD RMS).
After the proof of concept was complete, the Active Directory Rights Management Services server
role was removed.
You attempt to deploy AD RMS.
During the configuration of AD RMS, you receive an error message indicating that an existing AD
RMS Service Connection Point (SCP) was found.
You need to remove the existing AD RMS SCP.
Which tool should you use?
A.
Active Directory Users and Computers
B.
Authorization Manager
C.
Active Directory Domains and Trusts
D.
Active Directory Sites and Services
E.
Active Directory Rights Management Services
Explanation:
ADRMS will registered the Service Connection Point (SCP) in Active Directory and you will need
to unregister first before you remove the ADRMS server role.
If your ADRMS server is still alive, you can easily manually remove the SCP by below:
Answer E is incorrect since the role was already removed. Hence this part in the explanation:
“If your ADRMS server is still alive, you can easily manually remove the SCP by below”
The answer is Active Directory Domains and Trusts since that is where the service is registered:
https://social.technet.microsoft.com/Forums/en-US/70335835-512f-4fd4-9c1e-fc8c863b39c1/remove-ad-rms-cluster?forum=rms
0
3
I would say D: Sites and Services.
This (or in ADSI edit) is where you can remove the orphaned SCP entry
MikeZZL
4
0
It’s correct because you install it second time.
0
0
After the proof of concept was complete, the Active Directory Rights Management Services server role was removed.
So there is an orphaned entry, remove this with sites and services
2
0
The SCP is only visible with Active Directory Sites and Services (enable the “View Services Node” option) or using ADSIEdit.
To delete SCP entries from Active Directory by using ADSIEdit, first login to a server running AD and open ADSI edit. Browser to “Configuration” container, expand down until you get to “CN=Autodiscover” and then delete the entries that are of type “serviceConnectionPoint”.
The path is: CN=Autodiscover,CN=Protocols,CN=,CN=Servers,CN=Exchange Administrative Group,CN=Administrative Groups,CN=,CN=Microsoft Exchange,CN=Services, [Configuration Naming Context]
0
0
More hair splitting I think.
Yes. AD Sites and Services will allow you to remove the SCP
Yes. ADSIEDIT (not listed as a choice in this question, but it is on others) will allow you to remove the SCP.
BUT, this question says: “You attempt to deploy AD RMS.” Which means to me you’ve got the ADRMS console, (cause you’re installing it) to drill into the properties to as the exhibit shows, to remove the current SCP.
I have to go with E
0
0
Verified This in my lab.
The tricks again are in the question and i cant stress enough that people here must read every word in the question.
Question states “You attempt to deploy RMS” meaning the Tools and Role/Features are installed. So ask the description in the answer states, you can use the tool to remove the left-over SCP.
1
0
How can you use the AD RMS tool if the role was removed?
The question states that you “failed to install AD RMS”
Therefore I believe you would have to use Active Directory Sites and Services to remove the SCP.
0
0
Even the explanation states that you’ll need to unregister the SCP before removing the AD RMS role…
0
0
In the book MCSA 2012 R2 Complete Study Guide, there is a similar question. It states that we can use two tools to remove de orphaned SCP entry, Sites and Services and the ADSI Edit. So if the the question have Sites and Services on the options, thats the one. If it has ADSI Edit instead, choose it. Maybe the question asks for more than one answer, like “Choose all that aply”… then you choose both.
0
0