Correct Answer:
Explanation/Reference:
Microsoft Azure Rights Management(previously known as Windows Azure Active Directory Rights Management). To be able to decrypt rights protected documents you need to make sure thatMicrosoft Azure Rights Management is set up. Also you will need to enable a SuperUser account because The Active Directory Rights Management Services (AD RMS) super users group is a special group that has full control over all rights-protected content managed by the cluster. Its members are granted full owner rights in all use licenses that are issued by the AD RMS cluster on which the super users group is configured. This means that members of this group can decrypt any rights-protected content file and remove rights-protection from it.
The super users group is not enabled and is not assigned a group by default.
This can be done by running the appropriate commands in sequence which are: Import-Module AADRM
Connect-AADRMService
Enable-AADRM
Enable-AADRMSuperUserFeature
References:
https://technet.microsoft.com/en-us/library/dn569291.aspx
https://technet.microsoft.com/en-us/library/dn151475%28v=exchg.150%29.aspx