The user account that you use to upgrade AD RMS must be a member of the local Administrators group on the AD RMS server and ...