Setting Virtual Directory Permissions

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

After decommissioning has been enabled, it is available as a service. However, the decommissioning service is an IIS virtual directory with associated access permissions. For users to use the service, you must set permissions on the file named decommission.asmx located in the decommission virtual directory.

By default, Integrated Windows Authentication has been enabled for this virtual directory, but only system and administrator accounts have access to the actual file. When you specify the permissions for the DACL of the decommission.asmx file, you can limit access to a specific group of users who are trusted to remove the protection from rights-protected content or you can enable everyone to access the service.

Before users can start using the decommissioning service, the user's application needs to be modified so that requests for a use license can be sent to this new decommission pipeline. For Microsoft Office System 2007, this is done by adding a registry entry on the user's computer.

To create decommission registry entry on RMS client

  1. Log on to RMS client as local administrator.

  2. Open Registry Editor.

  3. Create a new registry key named Decommission underHKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\DRM

  4. Under the Decommission registry key, add a new String Value entry, replacing your-license-server with the name of the RMS cluster used for licensing:

    http(s)://your-license-server/_wmcs/licensing.

  5. Double-click the new registry entry, type https://your-license-server/_wmcs/decommission, and then click OK.

Note

If multiple RMS servers are in decommissioning mode, a new registry key can be created for each RMS server.