Microsoft Windows Server 2008: Data Protection 3 In the right-hand action pane, click the Enable Super Users link. 4 In the middle pane, click the Change Super User Group link. 5 In the Super Users dialog, click the Browse button and locate a Universal Group in Active Directory to represent the Super Users Group; then click OK. Removing AD RMS With usage over time, AD RMS has become a critical component of your business infrastructure. A number of items have been protected and removing AD RMS from the environment may cause those items to become inaccessible. To prevent the loss of information you should properly decommission the AD RMS environment. This changes the behavior of the AD RMS cluster to provide a decryption key for all rights-protected content which had been published using its licenses. This will give your organization and its users a chance to save their content without the content protection features and the system administrators a chance to remove all AD RMS clients from the environment. Upon decommissioning an AD RMS cluster, you will no longer be able to administer the environment. Ensure that you have adequately backed up the system before performing this step. Now, we'll walk through the steps of decommissioning a server. 1 Open Windows Explorer and locate the Decommissioning.asmx file (typically found in %SYSTEM- DRIVE%\inetpub\wwwroot\_wmcs\decommission); then grant the Everyone group Read & Execute per- missions. 2 Open the Control Panel, and under System and Maintenance | Administration Tools double-click the Active Directory Rights Management Services shortcut.