RMS error ID 139
I am trying to test RMS but I keep on getting error Event ID 139 message:"Active Directory Rights Management services (AD RMS) failed to query Active Directory Domain Services (AD DS). I went through the troubleshooting document on TechNet but everything looks good, did anybody else run into this issue? The Client is XP with Office 2003. Thanks Paul
January 29th, 2008 12:21am

Can you let me know which doc you are looking at? At the risk of repeating the doc, my chief concerns would beDNS (you can't be using a cached credential),RMS client install and the AD schema mods...
Free Windows Admin Tool Kit Click here and download it now
January 29th, 2008 12:38am

Document: http://technet2.microsoft.com/windowsserver2008/en/library/05ded5a3-04da-4d8b-b572-69d2c0b81b601033.mspx?mfr=true RMS client is installed, what do you mean AD schema mods... How do I check for cached credential?
January 29th, 2008 4:25pm

My apologies - I mis-spoke... It doesn't mod the schema, but it does make some entires into Active Directory. If you hop into ADSI edit and look under CN=Services,CN=Configuration,DC=domain,DC=com (assuming your domain is named "domain.com") you should see some information that involve your RMS configuration. If that isn't there, that could be a problem. As far as using cached credentials and verifying DNS is working: The doc you are looking at appears to make the assumption that a ping is sufficient. If anyone from MS is reading this thread, I invite them to have a peek and verify that I am not reading it wrong. I would perform an NSlookup <domain name> from the machine that is giving you this grief. You should be able to resolve the domain name to some IP addresses of domain controllers. You should also be able to nslookup <global catalog server name> and resolve that to an IP address. Check the event logs on the relevant domain controllers and verify that AD replication is functional. Check the DNS zones to verify that you have the appropriate srv entries within your domain structure to let everything know where your GCs are (they are the gc records). Let me know what you find,
Free Windows Admin Tool Kit Click here and download it now
January 29th, 2008 7:53pm

I don't see this "CN=Services,CN=Configuration,DC=domain,DC=com". when I run ADSI.
January 31st, 2008 12:09am

If open ADSI edit, it should allow you to select your connection point. You can connect to a few different partitions - the most common is "domain" but you need to connect to "configuration" to get into the services section. If this is not available to you, make sure that you are usin an account with supreme access...
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2008 12:24am

I see it and it has, now what it looks like it has all the pointers.
January 31st, 2008 6:01pm

Youcould run GPUpdate on the client and the RMS server (to see if you can chat with the domain). Right after, check the event logs on both. There may besome interesting bangs in there that you will need to iron out. Temporarily grant the RMS service account domain admin rights - obviously not necessary for operation, but will rule out an overly-pruned rights scenario unless someone has placed a "deny" somewhere in the mix.
Free Windows Admin Tool Kit Click here and download it now
February 2nd, 2008 7:25am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics