The AD RMS team has recently published new content that summarizes the required and optional AD DS user and computer objects for an AD RMS implementation. The following abstract provides some details: Microsoft Active Directory Domain Services (AD DS)