To Exclude Rights Account Certificates

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To perform this procedure, you must be logged on locally to the administration Web site with a domain user account that is a member of the Administrators group. As a security best practice, consider using Run as to perform this procedure.

These conditions are enforced by the client at the time the use license is bound to the protected content.

Excluding Rights Account Certificates

To Exclude Rights Account Certificates

  1. Log on to computer with a user account that is a member of the local Administrators group.

  2. Click Start, point to All Programs, point to Windows RMS, and then click Windows RMS Administration to open the Global Administration page.

  3. Next to the Web site on which you want to exclude rights account certificates, click Administer RMS on this Web site.

  4. In the Administration links area, click Exclusion policies.

  5. In the rights account certificate exclusion area, click Enable to exclude a user’s rights account certificate.

  6. Select the method for specifying the rights account certificate to exclude:

    • To exclude the rights account certificate by user name, click User name for the rights account certificate to exclude, type the name of the user to be excluded (in the form user_name@domain_name.com), and then click Add. Use this option for excluding the rights account certificates of internal users who have Active Directory user accounts.

    • To exclude a rights account certificate by its public key, click Public key string for the rights account certificate to exclude, type the appropriate rights account certificate public key string, and then click Add. Use this option for excluding the rights account certificates of external users who do not have Active Directory user accounts.

    Note

    To delete an account certificate from the exclusion list, click the excluded rights account certificate in the list, and then click Delete selected public keys from the exclusion list. The user who has that specific account certificate will now be able to get a license for rights-protected content from this cluster.

    Note

    To disable the exclusion of rights account certificates, click Disable.

For more information about performing this procedure, see "Excluding Rights Account Certificates" earlier in this subject.