User ({0}) could not be excluded since this user has not been issued a rights account certificate by your AD RMS cluster. ...