Right Management Service (RMS)

 

RMS is used for protect documents & email

What RMS can prevent

• Prevent viewing
• Print
• Save / Modify
• Copy / Paste
• Forwarding
• Expiration

What RMS cannot prevent

Protect against

• Camera photo
• Screen capture program
• Recording software

Work for who

• User email address
• Client window vista/7/2008 (Download required for XP,2k,2k3)
• Applications (Office Pro 2003,2007 Enter/Pro/Ultimate)
• Mobile 6
• Office Sharepoint 2007 above
• Exchange Server 2007 SP1 above

Installation

Server1

• Prepare RMS services account (Password never expires), RMS installer account (Password never expires)
• Install Active Directory Certificates services, Webs Server (IIS)
• Setup certificate templates, web server (duplicate certificate, 2003/2008), allow server permission to server that allow to enroll
• Enable customize certificate template created

Server2

• Bring in certificate –> MMC –> Certificates –> Request new certificate –> Fill up details to enroll, FQDN, URL (rms.lab.com), make private key exportable and achieve
• Add Roles ADRMS and fill in step by step details required
• ADRMS, add new template
• Test it