AD RMS Console Fails to Open
Issue
Opening the Active Directory Rights Management Services console fails with an error.
AD RMS on Windows Server 2008 R2 SP1: Runtime Error.
Application event log
Log Name: Application
Source: ASP.NET 2.0.50727.0
Date: 20/02/2015 11:40:08 AM
Event ID: 1314
Task Category: Web Event
Level: Information
Keywords: Classic
User: N/A
Computer: ADRMS.contoso.com
Description:
Event code: 4010
Event message: An unhandled security exception has occurred.
Event time: 20/02/2015 11:40:08 AM
Event time (UTC): 20/02/2015 4:40:08 PM
Event ID: af3b5f4d82b54c3cb4b999b1bbddb020
Event sequence: 2
Event occurrence: 1
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/1/ROOT/_wmcs/admin-1-130689240080259958
Trust level: Medium
Application Virtual Path: /_wmcs/admin
Application Path: D:\inetpub\wwwroot\wmcs\admin\
Machine name: ADRMS01
Process information:
Process ID: 4716
Process name: w3wp.exe
Account name: CONTOSO\svc_RMS
Request information:
Request URL: https://RMS01:443/_wmcs/admin/RoleMgr.asmx
Request path: /_wmcs/admin/RoleMgr.asmx
User host address: 10.178.11.52
User:
Is authenticated: False
Authentication Type:
Thread account name: CONTOSO\svc_RMS
AD RMS on Windows Server 2012 R2: Inheritance security rules violated by type: 'ASP.global_asax'. Derived types must either match the security accessibility of the base type or be less accessible.
Application event log
Log Name: Application
Source: ASP.NET 4.0.30319.0
Date: 2/20/2015 11:55:47
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: RMS01.cpandl.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 2/20/2015 11:55:47 AM
Event time (UTC): 2/20/2015 4:55:47 PM
Event ID: e563cecb500d441cab8eb0233e3e0799
Event sequence: 3
Event occurrence: 1
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/1/ROOT/_wmcs/admin-2-130689249258539829
Trust level: Medium
Application Virtual Path: /_wmcs/admin
Application Path: C:\inetpub\wwwroot\wmcs\admin\
Machine name: RMS01
Process information:
Process ID: 2364
Process name: w3wp.exe
Account name: CPANDL\svc_adrms
Exception information:
Exception type: HttpException
Exception message: Inheritance security rules violated by type: 'ASP.global_asax'. Derived types must either match the security accessibility of the base type or be less accessible.
at System.Web.Compilation.BuildManager.ReportTopLevelCompilationException()
at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()
at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters, PolicyLevel policyLevel, Exception appDomainCreationException)Inheritance security rules violated by type: 'ASP.global_asax'. Derived types must either match the security accessibility of the base type or be less accessible.
at System.Reflection.RuntimeAssembly.GetType(RuntimeAssembly assembly, String name, Boolean throwOnError, Boolean ignoreCase, ObjectHandleOnStack type)
at System.Reflection.RuntimeAssembly.GetType(String name, Boolean throwOnError, Boolean ignoreCase)
at System.Reflection.Assembly.GetType(String name)
at System.Web.Compilation.BaseTemplateBuildProvider.GetGeneratedType(CompilerResults results, Boolean useDelayLoadTypeIfEnabled)
at System.Web.Compilation.BuildProvider.CreateBuildResult(CompilerResults results)
at System.Web.Compilation.BuildProvider.GetBuildResult(CompilerResults results)
at System.Web.Compilation.ApplicationBuildProvider.GetGlobalAsaxBuildResult(Boolean isPrecompiledApp)
at System.Web.Compilation.BuildManager.CompileGlobalAsax()
at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()Request information:
Request URL: https://rms01:443/_wmcs/admin/RoleMgr.asmx
Request path: /_wmcs/admin/RoleMgr.asmx
User host address: fe80::21c4:2701:582b:91f7
User:
Is authenticated: False
Authentication Type:
Thread account name: CPANDL\svc_adrms
Thread information:
Thread ID: 180
Thread account name: CPANDL\svc_adrms
Is impersonating: False
Stack trace: at System.Web.Compilation.BuildManager.ReportTopLevelCompilationException()
at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()
at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters, PolicyLevel policyLevel, Exception appDomainCreationException)
Cause
.NET Trust Levels in IIS was set to something other than Full (internal).
Resolution
In the IIS Manager console go to Sites -> Default Web Site and select .NET Trust Level from the center pane.
In the trust level drop down select Full (internal) then apply in the right pane.