AD RMS configuration

In this section, let's look at how we can set up AD RMS 2016 and see how it really works on protecting confidential data. The environment it uses for the demo is built based on Windows Server 2016 with the latest updates. The AD DS forest and domain function levels are also set to Windows Server 2016.

Setting up AD RMS root cluster

AD RMS only can install in a domain member server. I have a demo server setup and its already a member server of the domain. First AD RMS server added to the forest creates the AD RMS cluster.

Installing the AD RMS role

The following are the steps to install the AD RMS role:

1. Log into the server as Enterprise Admin.
2. Install the AD RMS role and related management tools using the following command:

        Install-WindowsFeature ADRMS -IncludeManagementTools

The following screenshot shows the output for the preceding command:

Configuring the AD RMS role

The following are the steps to configure the AD RMS role:

1. Launch Server Manager and go to the notifications...