AD RMS Bulk Protection Tool and FCI Step-by-Step

Updated: April 7, 2010

Applies To: Windows Server 2008, Windows Server 2008 R2

Authored By: Bill Mathers

About this Guide

This step-by-step guide walks you through the process of configuring the AD RMS Bulk Protection Tool and FCI in a test environment. Windows Server 2008 R2 File Classification Infrastructure provides a built-in solution for file classification allowing administrators to automate manual processes with predefined policies based on the data’s business value. A full copy of this document for download can be found at Active Directory Rights Management Services Bulk Tool and File Classification Infrastructure Step-by-Step (https://go.microsoft.com/fwlink/?LinkID=190258).

In this guide, the AD RMS Bulk Protection Tool will be used in conjunction with FCI to apply AD RMS rights policies based on the classifications that are determined by FCI.

As you complete the steps in this guide, you will:

  • Install File Classification Infrastructure on Windows Server 2008 R2

  • Install and Configure the AD RMS Bulk Protection Tool

  • Configure FCI to use the AD RMS Bulk Protection Tool to apply policies based on business impact.

  • Verify the policies have been applied successfully.

What This Guide Does Not Provide

This guide does not provide the following:

  • Guidance for setting up and configuring Active Directory Domain Service in either a production or test environment. This guide assumes that Active Directory Domain Services is already configured in the test environment. For more information about configuring Active Directory Domain Services see, AD DS Installation and Removal Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkId=154567).

  • Guidance for setting up and configuring Active Directory Certificate Services in either a production or test environment. This guide assumes that Active Directory Certificate Services is already configured and working in the test environment. You must ensure that you have a valid SSL certificate and the certificate chain is trusted in order for the AD RMS Bulk Protection tool to automatically bootstrap the machine and the FCI Local System account. For more information about configuring Active Directory Certificate Services, see the Active Directory Certificate Services (https://go.microsoft.com/fwlink/?LinkId=179761).

  • Guidance for setting up and configuring AD RMS in either a production or test environment. This guide assumes that AD RMS is already configured and working in the test environment. For more information about configuring AD RMS, see the AD RMS Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkID=154256).

  • Guidance for setting up and configuring Exchange Server 2007 SP1 in either a production or test environment. This guide assumes that Exchange 2007 SP1 is already setup and configured in the test environment. For more information about configuring Exchange Server 2007 SP1, see Microsoft Exchange Server 2007 (https://go.microsoft.com/fwlink/?LinkId=154564).

  • Guidance for setting up and configuring Windows Powershell in either a production or test environment. This guide assumes that Windows Powershell is already setup and configured in the test environment on the FCI.fabrikam.com server. For more information about configuring Windows Powershell using Server Manager, see Windows Server 2008 Server Manager Technical Overview (https://go.microsoft.com/fwlink/?LinkId=178642).

  • Guidance for installing psexec in either a production or test environment. Psexec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software. This guide assumes that psexec is already setup and configured in the test environment on the CLT1.fabrikam.com client. For more information about psexec, see PsExec v1.97 (https://go.microsoft.com/fwlink/?LinkId=179150).