Failed to register service connection point url in active directory domain services(RMS)
Rights Management
Frank -
2:35 PM

Installation Problems

It is quite typical (unfortunately) that many production environments are treated as a test bed for many installations.  In this instance you may be faced with a scenario where you will need to deploy RMS into an environment that hasn’t perhaps been controlled with a proper change management policy or a test environment where staff can “play”.

When starting the provisioning stage of the RMS deployment you may be faced with some of the following scenarios, I will try to cover most of the common resolution strategies:

  • You receive a warning about a root CA not existing
  • RMS assumes that you have already deployed the first Root CA
  • Errors with Service Connection Points

Ensure that you have installed the Widows Support Tools for your version of Windows Server.  The support tools can be found on the Microsoft Windows Server CD.  Once installed, you should be able to click on Start > Run > Adsiedit.msc

Image-0018

and click OK.  Adsiedit.msc opens.

Image-0019

If you’re running Adsiedit.msc from your local machine you will need to connect to the Configuration connection point.  To do this follow the following steps:

  1. In ADSI Edit select Action > Connect to …
  2. The Connection Settings dialog opens
  3. In the Select a well known Naming Context dropdown, select Configuration and click OK.
  4. Expand to CN=Configuration,DC=contoso,DC=com
  5. Expand to CN=Services
  6. A normal configuration should look as follows, but in your case you’re probably missing the CN=RightsManagementServices container. We will need to recreate this container.
    Image-0022
  7. Ensure that the account you’re logged in on has Domain Admin rights.
  8. Right click Servcies and select New > Object …
  9. In the Create Object dialog, select container and click Next
    Image-0023
  10. In the Value field enter RightsManagementServices
  11. Click Next, click Finish.
  12. We now need to create a child container under the RightsManagementServices container. Right click on CN=RightsManagementServices and select New > Object …
  13. In the Create Object dialog, select container and click Next
  14. In the Value field enter SCP
  15. Click Next, click Finish.

Your ADSI Edit window should look something like this, showing the newly created containers.

Image-0024

At this point go back to your RMS administration website and refresh the provisioning page. You should notice that the warning has disappeared.

Archives