How to Install and Configure AD RMS on Windows Server 2012
Prerequisites:
A Windows Server 2012 machine joined to an Active Directory
domain.
Domain Admin or Enterprise Admin privileges.
SQL Server or use Windows Internal Database (WID) for AD RMS
database.
Service Account (domain user account) to run AD RMS services.
A Server Authentication certificate (can be self-signed or from
internal CA).
Ensure IIS role is installed (it will be added automatically during AD
RMS installation).
Step 1: Install the AD RMS Role
1. Open Server Manager.
2. Click on Manage > Add Roles and Features.
3. Click Next through the wizard until you reach Server Roles.
4. Select Active Directory Rights Management Services.
5. Click Next and then Install.
Wait for the installation to complete.
Step 2: Configure AD RMS
After installation, the AD RMS Configuration Wizard should launch
automatically:
1. Welcome Screen
Click Next.
2. Specify AD RMS Cluster Type
Choose Create a new AD RMS cluster.
Click Next.
3. Specify the AD RMS Cluster Key Storage
Choose to generate a new key or use an existing key.
Create a strong password for the cluster key.
Click Next.
4. Specify the AD RMS Service Account
Enter the domain service account (e.g., DOMAIN\ad_rms_svc)
created for this purpose.
Click Next.
5. Specify the AD RMS Database
You can use:
o Windows Internal Database (WID) (recommended for
small deployments)
o Or a SQL Server instance (enter server name if SQL)
Click Next.
6. Specify the AD RMS Web Site
Select the website for AD RMS services, usually default is Default
Web Site.
Click Next.
7. Specify the Cluster URL
This is the URL clients will use to contact AD RMS. Usually:
o [Link] rms
Example: [Link]
Make sure DNS resolves this properly.
Click Next.
8. Configure the SSL Certificate
Select an SSL certificate bound to the web service.
If you don't have a certificate, you can use a self-signed certificate
for testing.
Click Next.
9. Specify the Trusted User Domain
Enter the Active Directory domain(s) that will be trusted for RMS.
Click Next.
10. Confirm Settings
Review the settings and click Next to start configuration.
Step 3: Complete the Setup
Wait for the configuration to complete.
When finished, click Close.
Step 4: Verify AD RMS Installation
Open a browser and navigate to the AD RMS cluster URL:
perl
CopyEdit
[Link]
You should see an XML response or a page confirming the RMS
certification service is running.
Step 5: Configure Clients (Windows 10/11 + Office)
Make sure clients are joined to the domain and can resolve the AD
RMS cluster URL.
Office applications (2010 or later) will automatically detect the AD
RMS server.
You can now protect documents using IRM in Office apps (File > Info
> Protect Document > Restrict Access).
Additional Tips:
Backup your cluster key and database regularly.
Use Group Policy to configure AD RMS templates or enforce
protection policies.
If you want to publish AD RMS externally, configure appropriate
firewall and proxy settings.