Event ID 97 — AD RMS Cluster Configuration

  • Article

Applies To: Windows Server 2008

Servers in an Active Directory Rights Management Services (AD RMS) cluster are configured to both send and receive requests from AD RMS clients, other servers in the AD RMS cluster, and the AD RMS databases.

Event Details

Product: Windows Operating System
ID: 97
Source: Active Directory Rights Management Services
Version: 6.0
Symbolic Name: InvalidRegistryValueEvent
Message: The specified registry entry for the LDAP connection pool is not valid.

Parameter Reference
Context: %1
RequestId: %2
%3
%4

Resolve

Fix LDAP connection pool registry entries

AD RMS uses Lightweight Directory Address Protocol (LDAP) to communicate with the Active Directory Domain Services (AD DS) global catalog servers in your AD DS forest. The default AD RMS LDAP connection pool settings can be overriden by creating registry entries on the AD RMS servers in the cluster.

To perform this procedure, you must be a member of the local Administrators group, or must have been delegated the appropriate authority.

To fix Lightweight Directory Address Protocol (LDAP) connection pool registry overrides:

Caution: Incorrectly editing the registry might severely damage your system. Before making changes to the registry, you should back up any valued data.

  1. Log on to an AD RMS server in the cluster.
  2. Click Start. In the Start Search box, type regedit, and then press ENTER.
  3. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\DRMS\2.0.
  4. If a MinGC entry exists, make sure amount of available global catalog servers are at least this value in the registry and that the value is not NULL.
  5. If a MaxGC entry exists, make sure amount of available global catalog servers does not exceed the value in the registry and that the value is not NULL.
  6. If a ThreshHoldAlive entry exists, make sure this value is in the registry is less than or equal to 1.

Verify

To perform this procedure, you must be a member of the local Users group, or you must have been delegated the appropriate authority.

Note: Microsoft Office Word 2007 is used as an example in this section. Any AD RMS-enabled application can be used in place of Word 2007.

To verify that AD RMS is configured correctly, do the following:

  1. Log on to an AD RMS-enabled client computer.
  2. Click Start, point to All Programs, point to Microsoft Office, and then click Microsoft Office Word 2007.
  3. In the new document type This is a test document.
  4. Click the Microsoft Office Start Button, point to Prepare, point to Restrict Permissions, and then click Restricted Access.
  5. Select the Restrict permissions to this document check box.
  6. Type another AD RMS user's e-mail address in the Read box, and then click OK.
  7. Send this file to the person who was granted access in step 6.
  8. Have this person open the document and verify that he or she cannot do anything else with the document such as print it.

AD RMS Cluster Configuration

Active Directory Rights Management Services