Share via

Event ID 72 — AD RMS Logging service availability

  • Article

Applies To: Windows Server 2008

Active Directory Rights Management Services (AD RMS) uses Message Queuing on each server in the AD RMS cluster to send information to the logging database. This information is used to compile reports and assess how your AD RMS installation is performing.

Event Details

Product: Windows Operating System
ID: 72
Source: Active Directory Rights Management Services
Version: 6.0
Symbolic Name: LoggingMessageSigningFailureEvent
Message: The AD RMS message could not be digitally signed and will not be sent to Message Queuing.

Resolve

Restart AD RMS server

All messages sent to the AD RMS message queue are digitally signed before they are sent to the AD RMS logging database. If a message's digital signature cannot be validated by the AD RMS logging database, the message is discarded and not written to the AD RMS logging database. The message might have been tampered with, or there are network problems between the AD RMS server and the AD RMS logging database.

Note: This condition can occur each time the Internet Information Services (IIS) application pool that is used by AD RMS recycles. By default, this occurs once every 29 hours. Examine the event log to confirm that this condition is the result of the application pool recycling. If this condition is associated with the application pool recycling, no corrective action is required, otherwise you should follow this procedure to correct the problem.

To perform this procedure, you must be a member of the local **Administrators **group, or you must have been delegated the appropriate authority.

To restart the AD RMS server:

Caution: Restarting an AD RMS server should be done in accordance to any policies set forth by your organization regarding change management. Failure to do so could result in a disruption of service.

  1. Log on to the AD RMS server.
  2. Click Start, point to the right arrow, and then click Restart.
  3. In the Comment box, type Restarting AD RMS server, and then click OK.

Verify

To perform this procedure, you must be a member of the System Administrators database role, or you must have been delegated the appropriate authority.

To verify that the AD RMS logging database is working correctly:

  1. Log on to the AD RMS logging database server.
  2. Click Start, point to All Programs, click Microsoft SQL Server 2005, and then click SQL Server Management Studio.
  3. In the Server name box, type the name of the AD RMS logging database server, and then click Connect.
  4. Expand Databases, and then click the AD RMS configuration database. By default, the name of this database is DRMS_Logging_clustername_portnumber, where clustername is the name of the AD RMS cluster and portnumber is the TCP port in which the AD RMS Web services listens for requests.
  5. Click New Query.
  6. Type select * from drms_clusterpolicies, and then click Execute.

AD RMS Logging service availability

Active Directory Rights Management Services