You have an Office 365 tenant that uses an Enterprise E3 subscription. You activate Azure Rights Management
for the tenant.
You need to deploy Azure Rights Management for all users.
Which Windows PowerShell cmdlet should you run?
A.
Enable-Aadrm
B.
New-AadrmRightsDefinition
C.
Enable-AadrmSuperUserFeature
D.
Add-AadrmSuperUser
E.
Set-AadrmOnboardingControlPolicy
Answer is E Set-AadrmOnboardingControlPolicy -UseRmsUserLicense $False -Scope All
Option A only activates AADRM which has already been atcivated
3
0
Yes, “E” is the correct answer as “You activate Azure Rights Management
for the tenant.”
0
0
https://docs.microsoft.com/en-us/powershell/module/aadrm/set-aadrmonboardingcontrolpolicy?view=azureipps
Example 4 is exactly what is asked:
Set-AadrmOnboardingControlPolicy -UseRmsUserLicense $False -Scope All
1
0
Agree 🙂
0
0
Enterprise E3 subscription does not come with an ARM plan, right? I think what “You activate Azure Rights Management for the tenant” in the question means you add ARM plan to the tenant. It does not make sense to run OnboardingControlPolicy if you want to deploy Azure Rights Management for all users, because once you active ARM, default is for all users, right?
There is one sentence “If you don’t want all users to be able to protect files immediately by using Azure Rights Management, you can configure user onboarding controls by using the Set-AadrmOnboardingControlPolicy” in https://docs.microsoft.com/en-us/information-protection/deploy-use/activate-service#configuring-onboarding-controls-for-a-phased-deployment
2
0
Good of you to notice (and even think of the plan); but in the recent (yes the always changing) tenant features overview, ARM is included in the E3 plan.
since the question states you activated ARM (using Enable-Aadrm = the right way), you don’t have to run that cmdlet again.
Set-AadrmOnboardingControlPolic lets you enable it for users (you have the option with this cmdlet to define a scope)
i’m pretty sure E is the right answer
0
0
A. https://docs.microsoft.com/en-us/powershell/module/aadrm/enable-aadrm?view=azureipps
0
0