New answers tagged active-directory
If it's a computer (or group of computers) managed by Active Directory you can do this with Group Policy. The settings is under Computer Configuration > Policies > Windows Settings > Security Settings > System Services. If it's just on one computer you can just disable the service (Start > Run > Services.mmc) and change the Startup Type to Disabled.
You would use the token to authenticate the user to the machine. RMS uses a client certificate granted by the windows authenticated user to access the RMS protected document.
Top 50 recent answers are included