Unbound License Structure

  • Article

[The AD RMS SDK leveraging functionality exposed by the client in Msdrm.dll is available for use in Windows Server 2008, Windows Vista, Windows Server 2008 R2, Windows 7, Windows Server 2012, and Windows 8. It may be altered or unavailable in subsequent versions. Instead, use Active Directory Rights Management Services SDK 2.1, which leverages functionality exposed by the client in Msipc.dll.]

Within an Active Directory Rights Management Services (AD RMS) infrastructure, a license is an eXtensible Rights Markup Language (XrML) document. To make it easier to retrieve information from an unbound license, you can use the following AD RMS functions:

An unbound end-user license contains the complete rights information for all of the users specified in the license. Certain information may be duplicated in different places in the license, and several copies of the same object with different values (for example, principals or condition lists) can exist in a license, and therefore an unbound license can be quite complex.

The unbound license retrieved by DRMEnumerateLicense is a certificate chain. To properly query the unbound license itself, call DRMDeconstructCertificateChain to obtain the first element of the chain (item zero), which is the actual license. The following elements, declared in Msdrmgetinfo.h, can be retrieved from an unbound license:

g\_wszQUERY\_IDTYPE g\_wszQUERY\_IDVALUE g\_wszQUERY\_ISSUEDTIME g\_wszQUERY\_VALIDITYFROMTIME g\_wszQUERY\_VALIDITYUNTILTIME **g\_wszQUERY\_ISSUEDPRINCIPAL**(1...n)      Sub-Hierarchy A **g\_wszQUERY\_GROUPIDENTITYPRINCIPAL**(1...n)      Sub-Hierarchy A **g\_wszQUERY\_ISSUER**      Sub-Hierarchy A **g\_wszQUERY\_DISTRIBUTIONPOINT** (1...n)      Sub-Hierarchy A **g\_wszQUERY\_WORK** (1...n)      g\_wszQUERY\_IDTYPE      g\_wszQUERY\_IDVALUE      g\_wszQUERY\_SKUTYPE      g\_wszQUERY\_SKUVALUE      g\_wszQUERY\_NAME      **g\_wszQUERY\_OWNER**          Sub-Hierarchy A      **g\_wszQUERY\_CONDITIONLIST**          Same sub-hierarchy as g\_wszQUERY\_CONDITIONLIST below      **g\_wszQUERY\_RIGHTSGROUP** (1...n)          g\_wszQUERY\_NAME          **g\_wszQUERY\_CONDITIONLIST**              Same sub-hierarchy as g\_wszQUERY\_CONDITIONLIST below          **g\_wszQUERY\_RIGHT** (1...n)              g\_wszQUERY\_NAME              g\_wszQUERY\_RIGHTSPARAMETERNAME (1...n)              g\_wszQUERY\_RIGHTSPARAMETERVALUE (1...n)              **g\_wszQUERY\_CONDITIONLIST**                  Same sub-hierarchy as g\_wszQUERY\_CONDITIONLIST below **g\_wszQUERY\_CONDITIONLIST**     **g\_wszQUERY\_INTERVALTIMECONDITION**         g\_wszQUERY\_INTERVALTIMEINTERVAL     **g\_wszQUERY\_OSEXCLUSIONCONDITION**         g\_wszQUERY\_MINVERSION         g\_wszQUERY\_MAXVERSION **g\_wszQUERY\_ACCESSCONDITION** (1...n)         **g\_wszQUERY\_PRINCIPAL** (1...n)             Sub-Hierarchy A     **g\_wszQUERY\_REVOCATIONCONDITION** (1...n)         g\_wszQUERY\_REFRESHPERIOD         **g\_wszQUERY\_DISTRIBUTIONPOINT** (1...n)             Sub-Hierarchy A

The following elements make up Sub-Hierarchy A.

g\_wszQUERY\_IDTYPE g\_wszQUERY\_IDVALUE g\_wszQUERY\_NAME g\_wszQUERY\_ADDRESSTYPE (1...n) g\_wszQUERY\_ADDRESSVALUE (1...n)

Querying Licenses

Working with Licenses and Templates