Your network contains an Active Directory domain named contoso.com.
A previous administrator implemented a Proof of Concept installation of Active Directory Rights
Management Services (AD RMS).
After the proof of concept was complete, the Active Directory Rights Management Services server
role was removed.
You attempt to deploy AD RMS.
During the configuration of AD RMS, you receive an error message indicating that an existing AD
RMS Service Connection Point (SCP) was found.
You need to remove the existing AD RMS SCP.
Which tool should you use?
A.
Active Directory Users and Computers
B.
Authorization Manager
C.
Active Directory Domains and Trusts
D.
Active Directory Sites and Services
E: Active Directory Rights Management Services
Explanation:
ADRMS will registered the Service Connection Point (SCP) in Active Directory and you will need to
unregister first before you remove the ADRMS server role.
If your ADRMS server is still alive, you can easily manually remove the SCP by below:
How to manually remove or reinstall ADRMS
Since the AD RMS role was removed you probably don’t have access to the console.
Other options are the “ADSI edit” or the “Active Directory Sites and Services”. You can remove SCP from both utility.
Details are here: http://www.aiotestking.com/microsoft/you-need-to-remove-the-existing-ad-rms-scp/
Therefore the correct answer is “D”.
Please be aware on the exam maybe ADSS isn’t an availble option, you should search for ADSI edit in that case.
Agree with D. E would only work if you still had access to the ADRMS console.
Only one SCP can exist in your Active Directory forest. If you try to install AD RMS and an SCP already exists in your forest from a previous AD RMS installation that was not properly deprovisioned, the new SCP will not install properly. It must be removed before you can establish the new SCP. A SCP can be viewed using ADSI Edit or LDP. To view the SCP, connect to the configuration container in ADSI Edit and navigate the following nodes: CN=Configuration [server name], CN=Services, CN=RightsManagementServices, CN=SCP. You can remove an SCP by using the ADScpRegister.exe tool included in the RMS Administration Toolkit, which you can download from the Microsoft Download Center: http://www.microsoft.com/downloads/details.aspx?familyid=BAE62CFC-D5A7-46D2-9063-0F6885C26B98&displaylang=en This link is external to TechNet Wiki. It will open in a new window. .
According to https://technet.microsoft.com/en-us/library/cc747753(v=ws.10).aspx the answer is A
With that being said, I found it myself here: Start Active Directory Sites and Services -> View -> show service node
The SCP object is under: Services -> RightsManagementServices
D is correct.
For registering or editing SCP, you use Active Directory Rights Management Services. But for deleting SCP, you need to do that in Active Directory Sites and Services.
I’m going with c as per https://social.technet.microsoft.com/Forums/en-US/70335835-512f-4fd4-9c1e-fc8c863b39c1/remove-ad-rms-cluster?forum=rms
I’m assuming the installation isn’t finishing up and allowing access to AD Rights Management Console.
Look at the comment at the bottom of the link, the person typing in that answer made a typo. The answer is D for definite.
Hi Micah,
Don’t you mean “Active Directory Sites and Services” rather than “Active Directory Domains and Trusts”? The “Show Services” option is only available in ADSS – not ADDT. Just want to clarify this.
Thanks!
Go with E
Section: Configuring Identity and Access Solutions (15-20%
After trying this in a lab, then in theory E is right, as when you try and reinstall the RMS role you get the error about the SCP already existing but you can then step through the wizard to join an existing RMS cluster (which I guess is the one that was previously installed) and then from within the ADRMS console, remove and recreate the SCP, but that is a really messy way of doing it.
Much better would be to use ADS&S to remove the SCP before running the RMS configuration, so I think the answer should be D
E.
E: Active Directory Rights Management Services
But if RMS is removed, how can you remove it when the role was removed @ kurt and John
In the book MCSA 2012 R2 Complete Study Guide, there is a similar question. It states that we can use two tools to remove de orphaned SCP entry, Sites and Services and the ADSI Edit. So if the the question have Sites and Services on the options, thats the one. If it has ADSI Edit instead, choose it. Maybe the question asks for more than one answer, like “Choose all that aply”… then you choose both.