| Event Id | 209 |
| Source | Active Directory Rights Management Services |
| Description | An Active Directory Rights Management Services (AD RMS) operation failed due to insufficient memory. Free up some memory on this computer by closing one or more applications, and then try your request again. |
| Event Information | According to Microsoft: Cause :This event is logegd when An Active Directory Rights Management Services (AD RMS) operation failed due to insufficient memory. Resolution : Free up memory Use these sections to add performance counters to check for a memory shortage and free up memory on the AD RMS server. To perform these procedures, you must be a member of the localAdministrators group, or you must have been delegated the appropriate authority. Add performance counters To add performance counters: 1.Log on to the AD RMS server. 2.ClickStart, point to Administrative Tools, and then click Reliability and Performance Monitor. 3.In theReliability and Performance Monitor dialog box, selectPerformance monitor in the console tree, right-click a blank area in the results pane, and then clickAdd Counters. 4.In theAdd Counters dialog box, in theAvailable Counters object list, expand the appropriate performance object, select the counter that you want to add, click Add, and then clickOK. Note: Some performance counters that may assist in identifying memory shortages are Available Bytes, Commited Bytes, and Pages/Sec. These counters are found under the Memory performance counter group. Free up memory on the AD RMS server To free up memory on the AD RMS server: 1.Log on to the AD RMS server. 2.Right-click the taskbar, and then clickTask Manager. 3.Click theApplications tab and make sureStatus of all tasks are Running. If any tasks have a Status ofNot responding, you should consider ending the task by clickingEnd Task. 4.Click theProcesses tab. 5.ClickMemory and investigate processes that are using a lot of memory. Verify : AD RMS allows the user to apply rights-protection to a document and specify a Windows Live ID user to consume the content. Use the first procedure, "Ensure that the AD RMS cluster can contact the Windows Live ID service," to ensure that the AD RMS cluster can access the Internet to establish this trust policy. Use the second procedure, "Check for connectivity to the Microsoft Activation service," to ensure that the Windows Rights Management Services (RMS) client version 1.0 with no service packs can contact the Microsoft Activation service on the Internet. Use the third procedure, "Ensure that the AD RMS cluster is available on the network," to ensure that AD RMS-enabled clients on an organization's network can access the AD RMS cluster. To perform these procedures, you must be a member of the local Users group, or you must have been delegated the appropriate authority. Ensure that the AD RMS cluster can contact the Windows Live ID service To ensure that the AD RMS cluster can contact the Windows Live ID service: 1.Log on to the AD RMS server as the AD RMS service account. 2.ClickStart, point toAll Programs, and then clickInternet Explorer. 3.In the address bar, type http://certification.drm.microsoft.com, and then type ENTER. Check for connectivity to the Microsoft Activation service To check for connectivity to the Microsoft Activation Service: 1.Log on to a client computer. 2.ClickStart, click All Programs, and then clickInternet Explorer. 3.In the address bar, typehttps://activation.drm.microsoft.com/activation/activation.asmx, and then press ENTER.If the URL resolves to a Web page with the titleActivationWebService Web Service, the activation URL is operating correctly.If the URL does not resolve, check to make sure that it is allowed through the network proxy and that the URL is not being blocked by a firewall. Note: This is valid only for the RMS Client version 1.0 with no service packs. The RMS Client with Service Pack 1 and the RMS Client with Service Pack 2 do not connect to the Microsoft Activation Service. Ensure that the AD RMS cluster is available on the network To ensure that the AD RMS cluster is available on the network: 1.Log on to an AD RMS-enabled client computer. 2.Click Start, point toAll Programs, point toMicrosoft Office, and then clickMicrosoft Office Word 2007. 3.In the new document typeThis is a test document. 4.Click theMicrosoft Office Start Button, point toPrepare, point to Restrict Permissions, and then clickRestricted Access. 5.Select theRestrict permissions to this document check box. 6.Type another AD RMS user's e-mail address in theRead box, and then clickOK. 7.Send this file to the person who was granted access in step 6. 8.Have this person open the document and verify that he or she cannot do anything else with the document such as print it. |
| Reference Links | Event ID 209 from Source Active Directory Rights Management Services |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.