You have an Office 365 tenant that uses an Enterprise E3 subscription. You activate Azure Rights Management
for the tenant.
You need to deploy Azure Rights Management for all users.
Which Windows PowerShell cmdlet should you run?
A.
Enable-Aadrm
B.
New-AadrmRightsDefinition
C.
Enable-AadrmSuperUserFeature
D.
Add-AadrmSuperUser
E.
Set-AadrmOnboardingControlPolicy
Answer is E Set-AadrmOnboardingControlPolicy -UseRmsUserLicense $False -Scope All
Option A only activates AADRM which has already been atcivated
Yes, “E” is the correct answer as “You activate Azure Rights Management
for the tenant.”
Enterprise E3 subscription does not come with an ARM plan, right? I think what “You activate Azure Rights Management for the tenant” in the question means you add ARM plan to the tenant. It does not make sense to run OnboardingControlPolicy if you want to deploy Azure Rights Management for all users, because once you active ARM, default is for all users, right?
There is one sentence “If you don’t want all users to be able to protect files immediately by using Azure Rights Management, you can configure user onboarding controls by using the Set-AadrmOnboardingControlPolicy” in https://docs.microsoft.com/en-us/information-protection/deploy-use/activate-service#configuring-onboarding-controls-for-a-phased-deployment