"The attempt to connect to the Windows Azure AD Rights Management (AADRM) service failed" error when you try to connect to the service by using Windows PowerShell

PROBLEM
When you try to connect to the Azure Active Directory Rights Management (Azure AD Rights Management) service by using Windows PowerShell in Microsoft Office 365, you get an error message that resembles the following: 
The attempt to connect to the Windows Azure AD Rights Management (AADRM) service for <Organizational Account> failed. Verify that the user name and password you are using are correct and try again. If you have continued problems see http://go.microsoft.com/fwlink/?LinkId=251909.

The correlation ID is a3740c18-7bb2-4bb6-9025-8b5fc9468b09. Please note and provide this value if asked by support for it.

Connect-AadrmService : The remote server returned an error: (401) Unauthorized.
At line:1 char:1
+ Connect-AadrmService
+ ~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [Connect-AadrmService], WebException
+ FullyQualifiedErrorId : InvalidOperation,Microsoft.RightsManagementServices.Online.Admin.PowerShell.ConnectAadrm
ServiceCommand
CAUSE
This issue occurs if one or more of the following conditions are true:
  • You entered the wrong user name or password.
  • You aren't a company admin.
  • You don't have a subscription that includes the Rights Management service.
  • The network is preventing you from connecting to the Rights Management service.


SOLUTION
Note If Rights Management isn't enabled for your company, you use the Office 365 Admin Center to enable it. For more info about how to do this, go to the following Microsoft TechNet website:

To resolve the error message, make sure that the following are true:
  • Make sure that you enter the correct user name and password. To check, sign in to the Office 365 portal (https://portal.office.com).
  • You must be a global admin to connect to the Rights Management service.
  • To use Rights Management, you must have a subscription that includes Rights Management.
  • Work with the network admin to make sure that the network meets the requirements for connecting to the Rights Management service. The requirements are as follows:
    • Incoming and outgoing connections to *.aadrm.com are enabled
    • Incoming and outgoing connections to *.cloudapp.net (rmsoprod*-b-rms*.cloudapp.net) are enabled
    • Port 443 is open
MORE INFORMATION
For more info about Azure AD Rights Management, go to the following Microsoft TechNet website:



Still need help? Go to the Office 365 Community website.
Properties

Article ID: 2797755 - Last Review: 07/13/2014 13:02:00 - Revision: 9.0

Microsoft Azure Active Directory

  • o365e o365a o365p o365 o365022013 o365m KB2797755
Feedback