Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs Windows Server 2012 R2.
Server1 has the Active Directory Rights Management Services server role installed.
The domain contains a domain local group named Group1.
You create a rights policy template named Template1.
You assign Group1 the rights to Template1.
You need to ensure that all the members of Group1 can use Template1.
What should you do?

A.
Configure the email address attribute of Group1.

B.
Convert the scope of Group1 to global.

C.
Convert the scope of Group1 to universal.

D.
Configure the email address attribute of all the users who are members of Group1.

Explanation:
When a user or group is created in Active Directory, the mail attribute is an optional attribute that
can be set to include a primary email address for the user or group. For AD RMS to work
properly, this attribute must be set because all users must have an email attribute to protect and
consume content.
http://social.technet.microsoft.com/wiki/contents/articles/13130.ad-rms-troubleshootingguide.aspx