RMS problem troubleshooting-outlook messages with permissions cannot be opened

Outlook does not open with mail permissions

= = = Question Description

Customer reaction company employees have a strange problem, there is a user received multiple messages with RMS encrypted mail will not open properly, the message body can only be viewed through the Web interface, it is very laborious, and the attachments are not displayed, simply do not receive, observe the size of the message is the message body size

Cause analysis of = = =

I looked at their other colleagues of the mail, it can be viewed normally, the analysis may be the user RMS credentials problems, click on the upper left corner of Outlook "file"-"Information"-"Set permissions"-Manage credentials, enter the user password will appear in the image of the error,

After a number of retries, the RMS credential is determined to be problematic (the user has patched and re-installed Office so do not have to worry about the software problem), then go to troubleshoot the server problem

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M00/82/DA/wKioL1dimNDSCU_WAAFretR5m0E385.png "title=" QQ picture 20160616200743.png "alt=" Wkiol1dimndscu_waafretr5m0e385.png "/>

= = Problem troubleshooting

Log on to the Exchange server, open the Exchangepowershell input test-irmconfiguration command test, the result is a failure, determine the IMR configuration problems, attached to the diagram , the end result is failure 650) this.width=650; "Src=" http://s5.51cto.com/wyfs02/M02/82/DB/ Wkiom1din4qjcoz1aaijyfoykpe226.png "title=" qq picture 20160616204534.png "alt=" Wkiom1din4qjcoz1aaijyfoykpe226.png "/>

= = = Solution Process

The reason for the failure to be interested can take a closer look, according to the information that the EAS encryption service does not work in IRM, please join the mail system account in the Super User group in RMS server, open the RMS management console, discover that super is not enabled, enable it

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M02/82/DB/wKiom1dio4TwppUFAAHhwVgsKhw339.png "title=" Enable Super Users.png "alt=" Wkiom1dio4twppufaahhwvgskhw339.png "/>

Then add the mail system account to the Adrms_supers group

650) this.width=650; "src=" Http://s2.51cto.com/wyfs02/M02/82/DA/wKioL1dipbah17VIAAAqlIygbEg828.png "title=" Add the messaging system user to the SUG group. PNG "alt=" Wkiol1dipbah17viaaaqliygbeg828.png "/>

After the completion of the operation of the test command or failure, this is how it happened, after viewing the Microsoft Official website found that if you add members to the Adrms_super group, member information may take 24 hours to take effect, it can only wait until tomorrow to see!

Attached link https://technet.microsoft.com/zh-cn/library/ee424431 (exchg.141). aspx

= = The next day, after the member information becomes effective

I found the command test results are OK, just look at the results pass.

650) this.width=650; "src=" Http://s5.51cto.com/wyfs02/M02/82/DB/wKiom1dip2yyyyS7AAE4IyYO0h4847.png "title=" Test through. png "alt=" Wkiom1dip2yyyys7aae4iyyo0h4847.png "/>

= = = Test Result

Then send the user with permission to the message, the user and other colleagues can receive the message as normal, and the previous message can also be viewed normally, the problem is resolved?

= = = A new question

In the afternoon the user reflects the sending of attachments with permissions cannot be opened, prompting for what file suffix is correct or file corruption

And then the only thing that can be thought of is that the RMS server has encrypted the file and may have encrypted the problem

= = = Calm thinking

After you disable the Rms_super group in the RMS administration console, the attachment opens. Oh, my God!!! And then to the previous user sent a message with permission, the user can still receive the view, may be here you are depressed, why?

= = Puzzle Open

The answer is simple. There is already a cache between the user and the RMS server, so there is no problem with the receive, and the reason for this problem is that the user system is re-configured after Outlook and the cached credentials between RMS are lost and the permissions class message is not properly viewed, even though the Rms_ After super is disabled, there is a credential cache between the client and the RMS server, and user access is not a problem at the moment

====case Subsequent updates

If the problem continues to occur, then you can only re-judge and define him to the cause, subsequent problems continue to update

This article from "Sameold" blog, reproduced please contact the author!

RMS problem troubleshooting-outlook messages with permissions cannot be opened