Because of changes that were made between Active Directory Federation Services (AD FS) version 1.0 and AD FS 2.0, internal users within organizations that deploy AD FS and AD RMS will experience changes in how rights account certificates (RACs) are issued. For users of AD FS 1.0 and AD RMS, when an internal user provides a HomeRealm URI it will always get a standard-type RAC derived from their enterprise Active Directory deployment. For users of AD FS 2.0 and AD RMS, a temporary RAC will instead be issued that is generated by way of federated trust.
This change can be an issue in limited circumstances where a user receives a RAC by way of AD FS 2.0 because their computer if their computer was previously configured for AD FS. If this contdition exists, then prelicensing for AD RMS will be broken for that user.
This change can be an issue in limited circumstances where a user receives a RAC by way of AD FS 2.0 because their computer if their computer was previously configured for AD FS. If this contdition exists, then prelicensing for AD RMS will be broken for that user.