You have an Active Directory Rights Management Services (AD RMS) cluster.
You need to prevent users from encrypting new content.
The solution must ensure that the users can continue to decrypt content that was encrypted already.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

A.
From the Active Directory Rights Management Services console, enable decommissioning.

B.
From the Active Directory Rights Management Services console, create a user exclusion policy.

C.
Modify the NTFS permissions of %systemdrive%\inetpub\wwwroot\_wmcs\licensing.

D.
Modify the NTFS permissions of %systemdrive%\inetpub\wwwroot\_wmcs\decommission.

E.
From the Active Directory Rights Management Services console, modify the rights policy templates.

Explanation:
The answer should be A & D
Decommission AD RMS
http://technet.microsoft.com/en-us/library/cc754967.aspx
Decommission AD RMS Root Cluster
http://technet.microsoft.com/en-us/library/cc771071(v=ws.10).aspx
If you were to create a user exclusion policy, then that would “exclude” them from being able to
access certain entities. Therefore, not being able to access decrypted content to begin with.