To Set up a Super Users Group

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To perform this procedure, you must be logged on locally to the administration Web site with a domain user account that is a member of the Administrators group. As a security best practice, consider using Run as to perform this procedure.

Before it can be designated as the super users group for RMS, a security group must exist in Active Directory and the properties of that group must include an e-mail address (specified as a fully qualified domain name) that is the same as the account name. If you are using a RMS deployment that extends across one or more Active Directory forests, you must use an Active Directory Universal group so that group membership is replicated to all global catalog servers.

Setting up a Super Users Group

To Set up a Super Users Group

  1. Log on to a server in the RMS cluster as a member of the local Administrators group.

  2. Click Start, point to All Programs, point to Windows RMS, and then click Windows RMS Administration to open the Global Administration page.

  3. Next to the Web site on which you want to set up a super users group, click Administer RMS on this Web site.

  4. In the Administration links area, click Security settings.

  5. In the Super users area, click Enable to add a super users group.

  6. In Super users group name, type the fully qualified domain name, in the form group_name@domain_name.com, of an existing group in this Active Directory forest whose members are to be granted owner rights for all documents protected by RMS, and then click Save.

    To disable rights for the super users group, click Disable.

For more information about performing this procedure, see "Using the Super Users Group" earlier in this subject.