To Add a Trusted User Domain

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To perform this procedure, you must be logged on locally to the administration Web site with a domain user account that is a member of the Administrators group. As a security best practice, consider using Run as to perform this procedure.

Adding a Trusted User Domain

To Add a Trusted User Domain

  1. Log on to computer with a user account that is a member of the local Administrators group.

  2. Click Start, point to All Programs, point to Windows RMS, and then click Windows RMS Administration to open the Global Administration page.

  3. Next to the Web site on which you want to add a trusted user domain, click Administer RMS on this Web site.

  4. In the Administration links area, click Trust policies.

  5. In the Trusted user domains area, click Browse, locate and double-click the server licensor certificate of the user domain that you want to import to establish the trust relationship, and then click Add.

    The name of the domain appears in the Trusted user domains list.

  6. To specify which e-mail domains within the trusted user domain are trusted, click Trusted domains next to the certificate name in the list to open the Trusted e-mail domains window.

  7. Choose one of the following trust options:

    • Select the Trust all e-mail domains option to trust all of the user accounts that are members of that domain.


    • Select the Trust only specified e-mail domains option and then type the domain name to trust, such as, and then click Add. This adds the domain to the Trusted e-mail domains list. To remove a name from the list, select the name, and then click Remove. Listing a domain includes all of its subdomains.

  8. If you are using RMS in an environment where you need to expand group membership across forests, check the Trust RM licensing to security identifiers (SIDs) for this user domain check box.

  9. When finished, click Close window and return to Trust Policies.

For more information about performing this procedure, see "Adding and Removing Trusted User Domains" earlier in this subject.