The AD RMS service account that you specify must be a user account in the same domain in which you are installing AD RMS. ...