Share via

Event ID 121 — AD RMS Databases Availability

  • Article

Applies To: Windows Server 2008

The Active Directory Rights Management Services (AD RMS) configuration database holds all configuration data for the servers in the AD RMS cluster. If the configuration database is not available, AD RMS users will not be able to publish and consume rights-protected content.

Event Details

Product: Windows Operating System
ID: 121
Source: Active Directory Rights Management Services
Version: 6.0
Symbolic Name: ConfigDatabasePolicyRetrievalFailedEvent
Message: The Active Directory Rights Management Services (AD RMS) configuration database is unable to return an AD RMS policy value. Ensure that the computer hosting the AD RMS configuration database is operating correctly on the network and that the AD RMS service account has write permissions to the database.

Parameter Reference
Context: %1
RequestId: %2
%3
%4

Resolve

Check AD RMS database availability

To resolve this issue, you should ensure that the database server is available on the network and that the AD RMS service account has access to the databases.

Check AD RMS database connectivity from AD RMS server

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To check AD RMS database connectivity from AD RMS server:

  1. Type ipconfig /all at a command prompt on the AD RMS server. Make sure that the AD RMS server has an IP address in the correct IP address range, and does not have an Automatic Private IP Addressing (APIPA) address (an IP address in the 169.254.x.x range).
  2. Type ping localhost to verify that TCP/IP is installed and correctly configured on the local computer. If the ping is unsuccessful, this may indicate a corrupt TCP/IP stack or a problem with the network adapter.
  3. Type ping ip_address, where ip_address is the IP address assigned to the computer. If you can ping the localhost address but not the local IP address, there may be an issue with the routing table or with the network adapter driver.
  4. Type ping dns_server, where dns_server is the IP address for the DNS server. If there is more than one DNS server on your network, you should ping each one. If you cannot ping the DNS servers, this indicates a potential problem with the DNS servers, or with the network between the AD RMS server and the DNS servers.
  5. Type nslookup adrms_cluster_url, where adrms_cluster_url is the name of the AD RMS cluster, and then press ENTER. If the nslookup fails, type ipconfig /flushdns from a command prompt on each server in the AD RMS cluster.

Make sure AD RMS service account has access to AD RMS logging database

To perform this procedure, you must be a member of the System Administrators database role, or you must have been delegated the appropriate authority.

To make sure AD RMS service account has access to AD RMS logging database:

  1. Log on to the AD RMS logging database server.
  2. Click Start, point to All Programs, click Microsoft SQL Server 2005, and then click SQL Server Management Studio.
  3. In the Server name box, type the name of the AD RMS logging database server, and then click Connect.
  4. Expand Databases.
  5. Expand the AD RMS logging database. By default, the name of this database is DRMS_Logging_clustername_portnumber where clustername is the name of the AD RMS cluster and portnumber is the TCP port on which AD RMS communicates.
  6. Expand Security, and then expand Users.
  7. Make sure that the AD RMS service account is a user in the database.
  8. Right-click the AD RMS service account database user account, and then click Properties.
  9. Select the rms_service check box under Database role membership, and then click OK.

Verify

Use these sections to ensure that the AD RMS Logging service is started and that the AD RMS configuration database is available.

Verify AD RMS logging database availability

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To verify AD RMS logging database availability:

  1. Log on to a server in the AD RMS cluster.
  2. Click Start, point to Administrative Tools, and then click Services.
  3. Double-click AD RMS Logging service, and verify that the service status is Started.
  4. Repeat steps 1 - 3 for each AD RMS server in the cluster.

Verify AD RMS configuration databasae availability

To perform this procedure, you must be a member of the local AD RMS Enterprise Administrators group, or you must have been delegated the appropriate authority.

To verify AD RMS configuration database availability:

  1. Log on to a computer in the AD RMS cluster.
  2. Open the Active Directory Rights Management Services console. If the console opens without error, the configuration database is available.

AD RMS Databases Availability

Active Directory Rights Management Services