none
AD RMS with NO SCP - The directory service is unavailable RRS feed

  • Question

  • Hi Everybody, i have a strange problem with my AD RMS Environment. Here is my configuration:

    Server1: Windows 2012R2 -> AD & DNS

    Server2: Windows 2012R2 -> CA, RMS

    Client: Win7 64Bit, Office 2013

    The Website https://drm-server.drm.local/_wmcs/certification/certification.asmx is viewable from all clients, but when i try to connect in Office via Info->Protect Document->Restrictet Access i get the following error message:

    Sorry, something went wrong opening Informations Rights Management protected content. The directory service is unavailable

    I´m NOT allowed to set the SCP, so i created following Group Polices:

    <Properties name="" value="https://drm-server.drm.local/_wmcs/certification/certification.asmx" type="REG_SZ" key="SOFTWARE\Microsoft\DRMS" hive="HKEY_LOCAL_MACHINE" default="1" displayDecimal="1" action="U"/>
    <Properties name="" value="https://drm-server.drm.local/_wmcs/Certification" type="REG_SZ" key="SOFTWARE\Microsoft\MSDRM\ServiceLocation\Activation" hive="HKEY_LOCAL_MACHINE" default="1" displayDecimal="1" action="U"/>
    <Properties name="" value="https://drm-server.drm.local/_wmcs/Licensing" type="REG_SZ" key="SOFTWARE\Microsoft\MSDRM\ServiceLocation\EnterprisePublishing" hive="HKEY_LOCAL_MACHINE" default="1" displayDecimal="1" action="U"/>
    <Properties name="CorpLicenseServer" value="https://drm-server.drm.local/_wmcs/Licensing" type="REG_SZ" key="SOFTWARE\Microsoft\Office\15.0\Common\DRM" hive="HKEY_LOCAL_MACHINE" default="0" displayDecimal="1" action="U"/>
    <Properties name="CorpCertificationServer" value="https://drm-server.drm.local/_wmcs/Certification" type="REG_SZ" key="SOFTWARE\Microsoft\Office\15.0\Common\DRM" hive="HKEY_LOCAL_MACHINE" default="0" displayDecimal="1" action="U"/>
    <Properties name="" value="https://drm-server.drm.local/_wmcs/certification/certification.asmx" type="REG_SZ" key="SOFTWARE\Microsoft\DRM" hive="HKEY_LOCAL_MACHINE" default="1" displayDecimal="1" action="U"/>
    <Properties name="CloudLicenseServer" value="https://drm-server.drm.local/_wmcs/licensing" type="REG_SZ" key="SOFTWARE\Microsoft\Office\15.0\Common\DRM" hive="HKEY_LOCAL_MACHINE" default="0" displayDecimal="1" action="U"/

    I´ve got the informations about the reg entries from following sites:

    http://blogs.technet.com/b/rmssupp/archive/2007/07/13/rms-testing-rms-without-modifying-the-ad.aspx

    http://realercheng.wordpress.com/2013/01/09/ad-rms-server-with-no-scp/

    http://technet.microsoft.com/en-us/library/cc755112.aspx

    Summary: All registry entries are set, there is no problems with connection to the certification website, the template path is also accessable for everyone.

    I don´t know what to do know :( I´m very happy about any help from your side guys!!!

    Wednesday, October 29, 2014 10:09 AM

All replies

  • Hi there,

    Please try to save following to the .reg file and import to the client manually. If it works (well, works for me) - create a GPO.

    Warnings:

    1. You have to be running .reg import as local Administrator to import those keys!
    2. Adjust the version of your office (I can see you are using 15.0)
    3. Make sure that https://drm-server.drm.local/ on your client is added to the local intranet sites in IE and that certificate is trusted 
    Windows Registry Editor Version 5.00
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\Common\DRM]
    "CorpLicenseServer"="https://drm-server.drm.local/_wmcs/licensing"
    "CorpCertificationServer"="https://drm-server.drm.local/_wmcs/certification"
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\15.0\Common\DRM]
    "CorpLicenseServer"="https://drm-server.drm.local/_wmcs/licensing"
    "CorpCertificationServer"="https://drm-server.drm.local/_wmcs/certification"


    Did my post help you or make you laugh? Don't forget to click the Helpful vote :) If I answered your question please mark my post as an Answer.

    Friday, November 14, 2014 10:54 PM