RMS Subenrollment Service

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

The subenrollment service runs only on the RMS root cluster. It responds to requests that are submitted during provisioning by servers of licensing-only clusters for server licensor certificates.

The subenrollment service application file, SubEnrollService.asmx, is located in the Certification virtual directory RMS_Web_Site\_wmcs\Certification\, where RMS_Web_Site is replaced by the name of the Web site on which you provisioned RMS.

By default, access to this service is restricted to the local SYSTEM account. To provision and enroll a subordinate server in a licensing-only cluster, the administrator's user account of the licensing server must be added to the SubEnrollService.asmx discretionary access control list (DACL) with full control privileges.

The default access control list on this service is shown in the following table:

User or Group	Default Permission
SYSTEM	Full Control