Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Rights
Management Services server role installed.
The domain contains a domain local group named Group1.
You create a rights policy template named Template1. You assign Group1 the rights to Template1.
You need to ensure that all the members of Group1 can use Template1.
What should you do?
A.
Configure the email address attribute of Group1.
B.
Convert the scope of Group1 to global.
C.
Convert the scope of Group1 to universal.
D.
Configure the email address attribute of all the users who are members of Group1.
Explanation:
When a user or group is created in Active Directory, the mail attribute is an optional attribute that
can be set to include a primary email address for the user or group. For AD RMS to work properly,
this attribute must be set because all users must have an email attribute to protect and consume
content. AD RMS TroubleshootingGuide
http://social.technet.microsoft.com/wiki/contents/articles/13130.ad-rms-troubleshootingguide.aspx
I’m not quite into this topic as I’d like to, BUT: I setup ADRMS in my lab and did exactly what was mentioned in the question. Result: at first it was not possible to add the group to the template, because it was created without an Email address. I created it this way because the question also did not state it was configured. So filling the email attrib of that group is also absolutely mandatory when it is to be added to the template!
my conclusion considering this experience and the above answer description: in principle to get thing working you will need both, user and group email attributes filled up.
maybe because it’s stated that the group has already been added to the template implicates that A already has been done and therefore only D is left (as group scope does not matter).
0
0
yes, precisely because of that. See:
http://www.aiotestking.com/microsoft/you-need-to-ensure-that-all-the-members-of-group1-can-use-template1-5
http://www.aiotestking.com/microsoft/you-need-to-ensure-that-all-the-members-of-group1-can-use-template1-7
0
0