| Terms |
Definitions |
|
What tool can be used to create and delete existing SCP's
|
Active Directory Site and Services
|
|
What does RAC stand for
|
Rights Account Certificate
|
|
******WARNING*******
|
NEVER delete a rights policy template because all data protected by the right policy will become non-accessible. Alway ARCHIVE right policy templates that should not be distributed
|
|
you have backed up the RMS root server and exported the SLC in the RMS cluster what is the next process in migrating from 2008 to 2008R2 RMS
|
Join the 2008R2 server to the RMS cluster then take the root RMS server offline and start upgrading the remaining servers in the cluster to 2008R2 RMS
|
|
What is the standard validity period for a RAC
|
365 days
|
|
Define an RMS Exclusion Policy
|
allows you to deny certain users from the capability to acquire certificates and licenses
|
|
What is the RAC used for
|
The Rights Account Certificate is used to establish the identity of an RMS user
|
|
When upgrading RMS 2008 to RMS 2008R2 you have to run what to ensure that RMS functions
|
You have to run the RMS Upgrade Wizard
|
|
What are some reasons for Cluster installation issues
|
User intalling RMS is not a member of the local admins group, RMS service account doesnt have permissions to _wcms virtual directory, RMS service account does have access to configuration DB, RMS installation account and service account are different,RMS account on a DC needs to be domain admins group
|
|
what are RMS use rights
|
Full Control,View,Edit,Save,Print,Forward,Reply
|
|
What is the SLC used for
|
The Server Licensor Certificate is used to encrypt/decrypt all RMS data published by the RMS Cluster
|
|
What is the CLC
|
Client Licensor Certificate
|
|
What is the machine certificate used for
|
It estblishes the computer that a RMS Client is publishing RMS content from as a trusted computer
|
|
What are some of the most common issues with AD RMS
|
CLuster Installation, Cluster URL Availabiliy,SCP configuration,FS support installation
|
|
AD RMS is what type of solution
|
Information Right Solution
|
|
What types of applications can use RMS
|
Word,Excel,PPT,Sharepoint,Outlook
|
|
What are the steps to performing an Upgrade or Migration of RMS from 2008 to 2008R2
|
The first step is ALWAYS run a backup, then export the SLC,Export and install the CSP(if using a CSP)
|
|
What is the Publishing License used for
|
Anytime a RMS-Client trys to save RMS-protected content a Publishing License is created contain authorized users, rights and conditions for the content
|
|
What are the three methods that RMS uses to protect content
|
Established trusted participants, Assign of persistant usage rights and conditions,encryption
|
|
Where/What can you man used to manage the RMS Cluster key
|
You can use the "centrally managed key storage" or use a CSP to store the key
|
|
What do you have to do to DNS to support AD RMS
|
Create a CNAME for the first server in the RMS Cluster(example ADRMSSRV.Contoso.com maps to the CNAME RMS.contoso.com)
|
|
What port do you connect to when testing the SQL database
|
Port 1433
|
|
What is the CLC used for
|
The Client Licensor Certificate is used to ensure that a RMS client can publish content when disconnected from the corperate network
|
|
How do you configure AD RMS across forests by enabling anonymous access to the RMS pipeline
|
modify the two files used by AD RMS the AD RMS license.asmx and servicelocator.asmx
|
|
Name the three types of exclusion policies
|
User,Application,Lockbox,Windows Version/not supported on 2008R2
|
|
What is a Use License used for
|
The Use License contains the rights that apply to the protected content and requires and relies on the presense of a RAC
|
|
If you use SQL2005/2007 for the configuration database what must be done to the service account.
|
The RMS service account must be a member of the Systems Admins Account(sysadmins)
|
|
What is the SLC
|
Server Licensor Certificate
|
|
Name some ways to deploy RMS to the client
|
Group Policy, SCCM 2007,Unattended Installation Script, OS Image
|
|
What is the minimum version of Windows mobile that supports RMS
|
Windows 6.0
|
|
What is the validity for a temporary RAC
|
15 minutes
|
|
QUICK FACTS
|
Vista,7,2008 clients can automatically update their right policy templates. Clients will detect changes made to right policy templates and update the local rights policy templates
|
|
What registry modification do you do to create to prepare for offline publishing
|
HKEY_CURRRENT_USER\SOFTWARE\Microsoft\Offfice\14.0\Common\DRM\AdminTemplatePath
|
|
In which of the editions of Windows is the AD RMS client included
|
Vista,7,2008,2008R2(available for download for 2000,XP,2003
|
|
What is one step that you have to perform to add a trusted user domain
|
Export and import the Server Licensor Certificate of the server that is to be trusted
|
|
Where can Right Policy Templates be stored
|
in the configuration database(SQL) or a shared folder(* which users must have access to in order to access rights-protected content)
|
|
Define a Trusted Publishing Domain
|
A trusted publishing domain allows for one AD RMS cluster to issue use licenses against publishing licenses that were issued by a different AD RMS cluster
|
|
What kind of certificate can you use for the RMS-Cluster
|
CA assigned or a self-signed certificate
|
|
What do you have to do to enable a RMS across forest
|
Create a trusted user domain between each RMS cluster,Enable anonymous access on the licensing pipeline,Extend the Active Directory Schema adding the attribute msExchOriginatingForest,create contact objects/distribution groups
|
|
What are some steps to take to resolve RMS SCP configuration issues
|
User registering the SCP has to be a member of the Enterprise Admins Group,Delete any existing SCP's, Verify DNS is configured correctly and working
|
|
Name a reason that you might create an Exclusion Policy for a user
|
If the users credentials are stolen
|
|
What are some issues with RMS CLuster availability
|
DNS name resolution on the RMS Cluster URL,SSL certificates installed on servers, Ports 80 and 443 are open on firewall
|
|
Name the components of RMS
|
Clients(user/consumer),RMS Cluster,SQL Database(or Windows Internal Database but not supported), Licensing only cluster(optional),Active Directory Directory Services.
|