Troubleshooting Rights Management Services (RMS) client issues?

Analysis
Jun 13, 20072 mins

Well after a short stint in Japan for a vacation I’m back and ready to pump out some really good blogs entries. To start things out, I wanted to answer a question that I have been asked a number for times: What the best method is for troubleshooting Rights Management Services (RMS) client issues? Believe it or not (besides normal troubleshooting steps) the best method is to use a tool called IRMCheck.exe. This wonderful tool from the RMS team can be found as part of the Rights Management Services Administration Toolkit. Once you have downloaded and installed the toolkit the IRMCheck tool can be found under the following path C:Program FilesRMS SP2 Administration ToolkitIRMCheck. Note: There are different versions of the tool based on the version of the RMS client that you are running (X86, X64, intel64). When you run the tool, the CMD command prompt will fire up and complete an RMS client configuration test. Information from this test is then sent as a very “pretty” HTML report to a new or existing instance of Internet Explorer (IE). This report provides a wealth of information that can help determine if an RMS client is functioning correctly. For example the report will answer some of the following nagging questions:

  • Is the RMS client activated?
  • Are the machine certificate, CLC, and RAC present?
  • Can the client detect the service connection point (SCP)?
  • Are there any unsupported applications installed?
  • Is there a kernel debugger installed?
  • Is the client time set correctly?
  • Does the user have the correct version of Office installed?
  • The best part is that the above list is not even all of the information that the report will contain. Clearly, this is a tool that every RMS administrator should be familiar with as it will save them time in the long run. For my next post, I will either go over an interesting Exchange 2007 configuration scenario or dive deeper into another question about the RMS Lockbox. Let me know if anyone has a preference. For all of today’s Microsoft news, visit Microsoft Subnet