AIP AADRM Service Returning Disabled Exception in RMS Connector Despite being Enabled RRS feed

  • Question

  • I am facing an issue with my on-premises RMS Connector servers making requests to Azure and returning a "service is disabled" error.

    1. Connect-AipService and subsequent Get-AipService returns "Enabled".
    2. In the Azure portal, protection is reporting as enabled.
    3. I am able to classify & protect content with the AIP scanner AND the AIP Powershell Module

    However, any requests my RMS Connectors get return a 3000 error in the application logs indicating the service is disabled (full trace is below):


    This is a result of attempting to run Test-IRMConfiguration -sender myemail@mydomain.com

    I see ID 2000 events recognizing my Exchange 2016 servers as authorized.  Tracing the traffic displays successful handshake between Exchange on-prem -> RMS Connector on-prem-> Azure -> RMS Connector on-prem -> Exchange Server so I am sure the error below must be getting returned regarding my Azure tenant.

    Please help as this is blocking me from being able to implement AIP and otherwise it has been a great experience.

    RMS Connector Server which took the above Test-IRMConfiguration request, I get an Error 3000

    - System 
      - Provider 

       [ Name]  Microsoft RMS connector 
       [ Guid]  {26626A79-0CB5-4238-BF8C-256EBB71764C} 

       EventID 3000 
       Version 0 
       Level 2 
       Task 0 
       Opcode 0 
       Keywords 0x8000000000000000 
      - TimeCreated 
       [ SystemTime]  2019-07-10T16:02:39.346749800Z 
       EventRecordID 4638 
      - Execution 
       [ ProcessID]  2964 
       [ ThreadID]  5324 
       Channel Application 
       Computer RMSSERVER1.mydomain.com 
      - Security 
       [ UserID]  S-1-5-82-2584107188-3089786307-1128142335-783482534-2100853389 

    - EventData 
      message Exception of type 'System.Web.Services.Protocols.SoapException' was thrown. ---> Microsoft.RightsManagementServices.Online.Exceptions.ServiceIsDisabledException: ---> Exception of type 'Microsoft.RightsManagementServices.Online.Exceptions.ServiceIsDisabledException' was thrown. 
      stackTrace at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at Microsoft.AadrmConnector.WebService.AadrmClient.Server.GetServerInfo(ServerInfoRequest[] requests) at Microsoft.AadrmConnector.WebService.LicensingServer.GetServerInfo(ServerInfoRequest[] requests) 

    Friday, July 12, 2019 5:37 PM