Event ID 218 — AD RMS Cluster Availability

  • Article

Applies To: Windows Server 2008 R2

An Active Directory Rights Management Services (AD RMS) cluster and its clients must have network access to publish and consume rights-protected content.

Event Details

Product: Windows Operating System
ID: 218
Source: Active Directory Rights Management Services
Version: 6.1
Symbolic Name: WebAuthenticationEvent
Message: The authentication data is not valid for the remote server.

Parameter Reference
Context: %1
RequestId: %2
%3
%4

Resolve

Check AD RMS service account permissions and change AD RMS proxy settings

Use the following sections to add the AD RMS service account to the appropriate group and change the AD RMS proxy settings.

Add the AD RMS service account to the AD RMS Service Account group

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To add a user account to the AD RMS service account group:

  1. Click Start, point to Administrative Tools, and then click Computer Management.
  2. Expand Local Users and Groups, and then click Groups.
  3. Right-click AD RMS Service Account, and then click Add to Group.
  4. Click Add.
  5. In the Select Users, Computers, or Groups dialog box, type a name for the user account, and then click OK two times.

Change the AD RMS proxy settings

To perform this procedure, you must be a member of the local AD RMS Enterprise Administrators group, or you must have been delegated the appropriate authority.

To change the AD RMS proxy settings:

  1. Open the Active Directory Rights Management Services console. Click Start, point to Administrative Tools, and then click Active Directory Rights Management Services.

  2. Right-click the AD RMS cluster, and then click Properties.

  3. Click the Proxy Settings tab.

  4. Select the This cluster uses a proxy server to access external networks check box.

  5. In the Address box, type the IP address or DNS name of the proxy server that you want to use.

  6. In the Port box, type the port number that the proxy server uses to connect to the Internet.

    If you do not use the proxy server to connect to local resources, select the Bypass proxy server for local addresses check box.

    If you have addresses that should not be using the proxy server at all, type them in the Do not use proxy server for address beginning with box.

  7. If appropriate, select the This proxy server requires authentication check box.

  8. In Authentication type, choose the appropriate authentication type from the list: Basic, Digest, or Integrated Windows.

  9. In User name, type the user name that should be supplied in response to the challenge from the proxy server.

  10. In Password, type the password that should be supplied in response to the challenge from the proxy server.

  11. In Confirm password, re-type the password supplied previously to verify that you typed it correctly.

  12. If your proxy server uses Integrated Windows authentication, in Domain, type the domain to which the user belongs.

  13. Click OK.

Verify

AD RMS allows the user to apply rights-protection to a document and specify a Windows Live ID user to consume the content. Use the first procedure, "Ensure that the AD RMS cluster can contact the Windows Live ID service," to ensure that the AD RMS cluster can access the Internet to establish this trust policy.

Use the second procedure, "Check for connectivity to the Microsoft Activation service," to ensure that the Windows Rights Management Services (RMS) client version 1.0 with no service packs can contact the Microsoft Activation service on the Internet.

Use the third procedure, "Ensure that the AD RMS cluster is available on the network," to ensure that AD RMS-enabled clients on an organization's network can access the AD RMS cluster.

To perform these procedures, you must be a member of the local Users group, or you must have been delegated the appropriate authority.

Ensure that the AD RMS cluster can contact the Windows Live ID service

To ensure that the AD RMS cluster can contact the Windows Live ID service:

  1. Log on to the AD RMS server as the AD RMS service account.
  2. Click Start, point to All Programs, and then click Internet Explorer.
  3. In the address bar, type https://certification.drm.microsoft.com, and then type ENTER.

Check for connectivity to the Microsoft Activation service

To check for connectivity to the Microsoft Activation Service:

  1. Log on to a client computer.

  2. Click Start, click All Programs, and then click Internet Explorer.

  3. In the address bar, type https://activation.drm.microsoft.com/activation/activation.asmx, and then press ENTER.

    If the URL resolves to a Web page with the title ActivationWebService Web Service, the activation URL is operating correctly.

    If the URL does not resolve, check to make sure that it is allowed through the network proxy and that the URL is not being blocked by a firewall.

Note: This is valid only for the RMS Client version 1.0 with no service packs. The RMS Client with Service Pack 1 and the RMS Client with Service Pack 2 do not connect to the Microsoft Activation Service.

Ensure that the AD RMS cluster is available on the network

To ensure that the AD RMS cluster is available on the network:

  1. Log on to an AD RMS-enabled client computer.
  2. Click Start, point to All Programs, point to Microsoft Office, and then click Microsoft Office Word 2007.
  3. In the new document type This is a test document.
  4. Click the Microsoft Office Start Button, point to Prepare, point to Restrict Permissions, and then click Restricted Access.
  5. Select the Restrict permissions to this document check box.
  6. Type another AD RMS user's e-mail address in the Read box, and then click OK.
  7. Send this file to the person who was granted access in step 6.
  8. Have this person open the document and verify that he or she cannot do anything else with the document such as print it.

AD RMS Cluster Availability

Active Directory Rights Management Services