An organization uses an Active Directory Rights Management Services (AD RMS) cluster names RMS1
to protect content for a project. You uninstall AD RMS when the project is complete. You need to
ensure that the protected content is still available after AD RMS is uninstalled.
Solution: You run the following Windows PowerShell command:
Set-ItemProperty -Path <protected content>:\ -Name IsDecommissioned -Value $true –
EnableDecommission
Does this meet the goal?
A.
Yes
B.
No
Shouldn’t this be Yes?
https://technet.microsoft.com/en-GB/Library/ee221047%28v=ws.10%29.aspx
The only difference is that the Powershell command on the above link says:
Set-ItemProperty -Path :\ -Name IsDecommissioned -Value $true -EnableDecommission
where is the name of the Windows PowerShell drive.
I am not sure if the path in the question is pertaining to a drive or a specific folder
Agree, should be YES
I am still not 100% sure about this. While I agree that the Powershell command would appear to be correct it is the wording of the question that confuses me. The formatting in my previous command went pear shaped so I will put the drive in capitals.
The external link I provided has:
Set-ItemProperty -Path DRIVE:\ -Name IsDecommissioned -Value $true -EnableDecommission
Now, does the PROTECTED CONTENT part of the command in the question relate to a whole drive or is it trying to suggest we want to decommision just a certain folder/part of the drive?
Any thoughts as to if I am over thinking this and the answer is actually Yes?
lol in the question’s command is just a PlaceHolder for information that will vary according to your setup.
In the real world, you’d replace “” with the drive path of your protected content.
I had this on my exam and despite what I said above I did answer the question as Yes.
Agreed with “A: Yes”
Link Below:
https://technet.microsoft.com/en-us/library/ee221047(v=ws.10).aspx
Set-ItemProperty -Path :\ -Name IsDecommissioned -Value $true -EnableDecommission
Agreed with “A:yes”
I’m going with no.
https://technet.microsoft.com/en-us/library/cc771071(v=ws.10).aspx
Set the permission on the decommissioning pipeline.
After the decommissioning service is enabled on the AD RMS cluster, you must modify the permissions on the decommissioning pipeline so that AD RMS users can connect to it. By default, only the local SYSTEM account has access to the pipeline. You should give the AD RMS Service Group the Read & execute permission on the decommission folder. Then on the decommission.asmx file, you should give everyone the Read & execute permission. The decommission pipeline is located in the %systemroot%\inetpub\wwwroot\_wmcs folder, where %systemroot% is the volume on which Windows Server 2008 is installed.
In the question, all users were given read and execute to the pipeline, but what about giving the service group read and execute on the folder?
Took 70-414 last weekend and PASSED with a good score!
Case Studies according to my real test: Contoso Ltd., A. Datum, Proseware Inc, Northwind Traders.
And, lots of Drag and Drop Questions, including Network Unlock & BitLocker, Windows Network Load Balancing (NLB), Security Logs, Certificate Revocation Lists (CRLs), VM-SQL (Contoso) and so on.
I used PassLeader 70-414 dumps (I learned its VCE dumps — http://bit.ly/1zqbK2Q) for preparing for exam, all Case Studies and Drag and Drop Questions and other questions are available, very helpful!
Good Luck To You All!
Soog seng do u understand that we have to buy that dump? please share it
According to https://technet.microsoft.com/en-us/library/ee221047(v=ws.10).aspx the AD RMS must be decommissioned in order to obtain the decryption key which will allow users to view protected content. Decommissioning MUST happen before uninstalling the AD RMS Service. In the question the AD RMS Service is uninstalled BEFORE the Decommissioning command is run. So, imho the answer is B (no)
That link you provided only mentioned about Server 2008 R2.
So I checked if the same applies to server 2012 (R2) since we the exam is for Server 2012.
I found this link: https://technet.microsoft.com/en-us/library/cc754967.aspx
But it shows the same info but here it states that it is also applied to server 2012.
So I too think you are right and that the correct answer is B: (NO)
I am not a native English speaker, for me, difficult to understand whether the question uninstalls the AD RMS firstly or launches the command line firstly. For sure the answer is NO if the former.
In https://technet.microsoft.com/en-us/library/ee221047(v=ws.10), it says “where is the name of the Windows PowerShell drive” rather than “protected content”.
Hence, I vote for NO.
where “drive” is the name of the Windows PowerShell drive
I think B is right.
“You uninstall AD RMS when the project is complete” It don’t have “but before ….”
It’s a trap