You can control the federated domains that the Active Directory Rights Management Services (AD RMS) cluster will provide licenses to. You can do this either by specifying the users and domains that can receive licenses, or by specifying the users and domains that will be blocked from receiving licenses.

Membership in the local AD RMS Enterprise Administrators, or equivalent, is the minimum required to complete this procedure.

To allow or block domains for licensing
  1. Log on to a server in the AD RMS cluster.

  2. Open the Active Directory Rights Management Services snap-in and expand the AD RMS cluster.

  3. Expand Trust Policies, and then click Microsoft Federation Gateway Support.

  4. In the results pane, click Manage Microsoft Federation Gateway Support.

  5. In the Microsoft Federation Gateway Support dialog box, click the Licensing Domains tab.

  6. Do one of the following:

    • Click Allow to specify which users and domains will be permitted receive licenses from the AD RMS cluster.

    • Click Block to specify which users and domains will not be permitted to receive licenses from the AD RMS cluster.

  7. To add a user or domain to the list, in the box type the user’s e-mail address in the form user@domain.com or domain name in the form domain.com, and then click Add. You can also use an asterisk (*) to specify all users and domains.

  8. To remove a user or domain from the list, select the user’s e-mail address or the domain, and then click Remove.

  9. Click OK.

Additional considerations

Additional references

Table Of Contents