RMS Account Certification Service

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

The account certification service runs only on the root cluster. The account certification service creates rights account certificates, which associate user accounts with specific computers. A rights account certificate enables a user to publish or consume rights-protected content while using a specific computer.

The account certification service application file, Certification.asmx, is located in the Certification virtual directory that is in IIS.

The default access control list on this service is shown in the following table:

User or Group	Default Permission
Administrators	Full Control
RMS Service Group	Read and Execute
SYSTEM	Full Control
Users	Read and Execute