Azure Information Protection – We were not able to find the Information Rights Management template.

Users were getting the following error message on the citrix environment however they were not getting the errors on the local machine when applying a sensitivity label within word. The fix should also apply if the error is happening on the local machine

First check AIP is not getting blocked by running the following script in powershell:

$request = [System.Net.HttpWebRequest]::Create("https://admin.na.aadrm.com/admin/admin.svc")     
$request.GetResponse()
$request.ServicePoint.Certificate.Issuer

The script should response with the certificate issuer if the machine can communicate with AIP

If the above fails then communication is blocked and needs resolving. Should the devices respond but is still failing to apply a label then action the below

Resolution:

Close all office applications

Delete RMS registry settings for the user 

Open regedit

Navigate to HKCU\Software\Microsoft\Office\XXX\Common\DRM
Delete the DefaultServer and DefaultServerURL values

Navigate to HKCU\Software\Classes\Local Settings\Software\Microsoft\MSIPC

Delete the server name key that corresponds to the RMS server

Ensure both the registry path under MSIPC and the key values within DRM have been removed

Next is to remove the existing licences, GICs etc..

Browse to the users %localappdata%\Microsoft\MSIPC folder and delete the folder

Contents within the folder for reference

Once the folder has been removed, re-open word and try again

This process can be created into a script for automation, please use the below as an example:

REM ***Delete the RMS registry settings for the user. 

reg delete HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\DRMC /v "DefaultServer" /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\DRMC /v "DefaultServerUrl" /f


REM ***Find and delete RMS Server/Cluster

for /f "delims=" %%a in (' 
    reg query "HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\MSIPC" ^|
    find "rms.eu.aadrm.com"
') do (
     set "regs=%%a"
)

reg delete "%regs%" /f


REM ***Clear the existing licenses, GICs (RACs), and etc.

REM rmdir /S /Q %localappdata%\microsoft\MSIPC 
md %localappdata%\temp_RMS
robocopy %localappdata%\Temp_RMS %localappdata%\Microsoft\MSIPC /mir
Share
Ryan Wilson
Azure and Office 365 Technical Architect | Microsoft Certified Solutions Associate: Office 365 | Microsoft Certified: Azure Solutions Architect Expert | Microsoft Certified Solutions Expert: Productivity | Microsoft 365 Certified: Enterprise Administrator Expert | Microsoft 365 Certified: Messaging Administrator Associate

9 Responses

  1. NoahVSolak says:

    Hmm is anyone else encountering problems with the images on this blog loading? I’m trying to figure out if its a problem on my end or if it’s the blog. Any responses would be greatly appreciated.

    • Ryan Wilson says:

      Blog has been tested on different machines and browsers with no issues, did you manage to resolve the issue?

  2. NildaZAdamos says:

    I am going to immediately seize your rss feed as I simply cannot to find your e-mail subscription link or e-newsletter service. Do you’ve any? Please let me realize so that I may just subscribe. Thanks.

    • Ryan Wilson says:

      Hi, i am in the progress of RSS feeds. Soon as i have created the RSS feeds i shall forward on the information
      Thanks
      Ryan

  3. TroyTHulette says:

    There is certainly certainly much to understand this topic. I like every one of the points you’ve made.

  4. RayeXDuesing says:

    Ahaa, its nice discussion concerning this paragraph at this particular place at this blog, We have read everything, so at this time me also commenting here.

  5. BurtonMBrohl says:

    I am actually grateful to the owner on this site that has shared this enormous paragraph at here.

  6. JasonZStoute says:

    Appreciate this post. Will give it a try.

    My page; JasonZStoute

Leave a Reply

Your email address will not be published. Required fields are marked *