Hello all. I have posted this comment on other forums (including Expert-Exchange) and no one has been able to help me. In fact I was in communication with a guythat is on the RMS team over @ Msft and his solution was to "re-installWindows". That is not an option, so maybe someone here has a betteridea...I installed RMS on my DC \ GC \ DNS \ DHCP server, I will call it SRV01.The install completed, but with errors, andthe service didn't seem to be functioning properly (wouldn't work with SharePoint). I was going to remove and reinstall the role (or move the role to a different server) but when I try to remove the roleI get (translated from German):Active Directory Rights Management Services: error in distance <Fehler>: Error executing custom actions before uninstalling the Active Directory Rights Management Server. The index was outside the area. It must not be negative and less than the listing. Parameter name: index at System.Collections.CollectionBase.System.Collections.IList.get_Item (Int32 index) at System.DirectoryServices.PropertyValueCollection.get_Item (Int32 index) at Microsoft.RightsManagementServices.Configuration.ProvisionHelper.GetPort (String strTargetComputer, String strIIsService, StrSiteindex String, Boolean fSSL) at Microsoft.RightsManagementServices.Configuration.ProvUtils.GetWebsites (String strTargetComputerName, String strIIsWebService) at Microsoft.RightsManagementServices.Configuration.ProvUtils.IsProvisioned () at Microsoft.RightsManagementServices.Configuration.ProvisioningBase.Unprovision () at Microsoft. RightsManagementServices.Configuration.ProvisionerBase.Unprovision () at Microsoft.RightsManagementServices.Configuration.ProvisionerHelper.Run (Operation Type operationType, Object data) in Microsoft.RightsManagementServices.Configuration.ProvisionEngine.Run (Operation Type operationType, Boolean passwordEncrypted) at Microsoft.RightsManagementServices.Configuration. CmdLineHandler.Run () The following role services have not been removed: Active Directory Rights Management Server So now I can't use RMS or uninstall it. Any help would be really appreciated.

Hello, Would you please help collect the CBS log for us to better understand the issue? Try adding the role from Server Manager again and note down the time when you do this. Locate CBS.log at "%windir%\Logs\CBS\CBS.log". Please collect the proper section starting from the time you add the role in Server Manager. You can either post the CBS log here or send it to tfwst@microsoft.com. Note: a. Please include the following three lines for this issue in the email body: Cannot Remove RMS from Domain Controller http://social.technet.microsoft.com/forums/en-US/winservergen/thread/20ddae46-0414-4e39-92c6-23022de20772 Chang Yin - MSFT b. We will continue to discuss the issue here in the forum and will NOT reply via emails. c. Please post a quick note in the current thread to inform me after sending the email. Additionally, based on my experience, most of these problems relate to the Server Manager store corruption. This usually is caused by an unsuccessfully installed update. Would you please perform the following steps to see which update is corrupted? Steps to find out corrupted update: ===================== 1. Download System Update Readiness Tool from the following link and install it on your system. http://support.microsoft.com/kb/947821 2. The following two log files will be automatically generated after you install this tool. Please check these two log files to see which update is not installed successfully. %SYSTEMROOT%\Logs\CBS\CheckSUR.log %SYSTEMROOT%\Logs\CBS\CheckSUR.persist.log If you find any update is corrupt, you can try uninstalling the update, downloading it and manually installing the update to see how it goes. Best regards,Chang Yin

I am so sorry I didn't see your response sooner... I must have missed the notification.I sent out the log file you requested and I am going through your recommended steps now.Thank you.

I downloaded an installed the System Update Readiness Tool per your recommendation.The output generated by the two log files is as follows:------------------------------------------------------------------------------------------------------------===================== CheckSUR.log=============================------------------------------------------------------------------------------------------------------------Checking System Update Readiness.Version 6.0.6001.222752008-11-12 19:32 Checking Deployment Packages Checking Package Manifests and catalogs. Checking package watchlist. Checking component watchlist. Checking packages. Checking component store Checking SMI StoreSummary:Milliseconds: 231386No errors detected------------------------------------------------------------------------------------------------------------===================== CheckSUR.Persist.log========================------------------------------------------------------------------------------------------------------------Checking System Update Readiness.Version 6.0.6001.222752008-11-12 19:32 Checking Deployment Packages Checking Package Manifests and catalogs. Checking package watchlist. Checking component watchlist. Checking packages. Checking component store Checking SMI StoreSummary:Milliseconds: 231386No errors detected------------------------------------------------------------------------------------------------------------============================================================------------------------------------------------------------------------------------------------------------I will be awaiting your reply.Thank you.

Hi Richard, I have received the log file. However, I didn't find any errors or warnings in the CBS log. Would you please retry uninstalling the Active Directory Rights Management and check if any errors or warnings are logged in the CBS log? You can do this by searching ", error" (without the quotes) (there is a space character between ',' and 'error'). Additionally, according to the CheckSUR.log, there is no corrupted update in your system. I think the store corruption may be caused by some incorrect operation and you also mentioned that when you install the ADRM role, several errors occurred. You can try running "sfc /scannow" to see what the result is. You can do this as the steps listed in the following KB article: Some Windows Vista functions may not work, or Windows Vista may stop responding (also applying to Windows Server 2008): http://support.microsoft.com/kb/929833 Here is another KB article about this information: How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program generates in Windows Vista: http://support.microsoft.com/kb/928228 Best regards,Chang Yin

Absolutely, I will go over those items momentarily and post the results.Thank you for your reply.

So I moved the old CBS log to a different location and attempted to remove the role again (so it would createa new log) and I got the same error mentioned in my first post. Afterward I went into the new CBS log file and looked for ", error", there were no results. A search for "error" turned up results, but the weren't in reference to the role in question.I ran the "sfc /scannow" and after reviewing the log file I saw that the C:\Windows\Security\..\..\scwvariables.xml file (which looks like it just defines a language option?) couldn't be repaired because the file and backup were corrupt so I went through the process that you posted (KB929833) tomanually create one based upon a known good Server 2008 install.After that was complete I rebooted the server and I still have the same error when trying to remove the role.

I also just noticed two things that may be of use:1) When launching the RMS console on the server in question I get the error (translated from German): "Error connecting to the local AD RMS Management, as the value of "Admin ConnectionString Local Point" in Registrierungsschlussel "HKLM \ Software \ Microsoft \ DRMS \ 2.0" is invalid."2) I noticed (when reading through the ADRMS decomissioning guide) that there is no%systemdrive%\inetpub\wwwroot\_wmcs\ folder, nor a corresponding folder / Virtual Directory in IIS.

Hi Richard, Based on all the descriptions, the problem seems not caused by the corrupted Server Manager store. I think it may be caused by some incorrect configuration when you created the AD RMS, as you also mentioned that you saw some errors after installing the AD RMS. Additionally, according to the last two symptoms, these may also be caused by an incorrect configuration of the AD RMS. I am sorry to say that I am not good at AD RMS. You may need to go through all the steps one-by-one to see which steps you didn't configure properly, or check if all the pre-requirements are met. AD RMS Step-by-Step Guide: http://technet.microsoft.com/en-us/library/cc753531.aspx Pre-installation Information for Active Directory Rights Management Services: http://technet.microsoft.com/en-us/library/cc771789.aspx In this case, I am sorry to say that you may need to either restore the entire server if you have a backup or, you may need to reinstall the whole server. Best regards,Chang Yin

I have read through those documents and have found nothing of note.I unmarked your post as the answer because, although helpful, it didn't resolve my situation.Restoring from backup / rebuilding the server is NOT an option.