The AD RMS Service Account is used by the AD RMS cluster for performing operations such as accessing network resources, querying ...

The AD RMS Service Account is used by the AD RMS cluster for performing operations such as accessing network resources, querying Active Directory Domain Services, and looking up information on the database server.

To change the AD RMS Service Account, you must be logged on using an account that is a member of both the local Administrators group and the AD RMS Enterprise Administrators group. If the configuration database for this cluster is stored on a remote database server, your account must also have the appropriate permissions on the database server. For example, if you are using a SQL Server to support your AD RMS cluster, your account must belong to the SQL SysAdmin group.