Microsoft Rights Management services (RMS) whitepapers v1.51
Due to increased regulation, the Consumerization of IT (CoIT) and the “Bring Your Own Device” (BYOD), the explosion of information with dispersed enterprise data, the Social Enterprise and its applications enabling new collaboration, analytic scenarios, etc. enterprises of all sizes are facing growing needs to protect sensitive information. At the same time, enterprises have a need to securely share that same information amongst appropriate employees and other individuals within and outside the corporate network. The Microsoft Rights Management services (RMS) offering (microsoft.com/rms) provides the capability to create and consume protected content such as e-mail and documents of any type.
In addition to the existing AD RMS role in Windows Server role to implement an on-premises solution, the RMS offering also features the cloud-hosted Azure RMS service. Azure RMS is notably available as a standalone subscription (for your on-premises infrastructure with the Azure RMS connector), is part of the Enterprise Mobility Suite (EMS) subscription, or is part of the Office 365 Enterprise subscriptions, natively integrated with Exchange Online email, SharePoint Online, and Office client applications to apply persistent protection to the content to meet the business requirements of your organization. In addition, thanks to the modern authentication in Office 365, Azure RMS can now work better hand by hand with federation on-premises for Office client applications. This new capability also allows to perform a multi-factor authentication if you want to.
Furthermore, by leveraging Azure Active Directory, Azure RMS acts as a trusted hub for secure collaboration where an organization can easily share information securely with other organizations without additional setup or configuration. The other organization(s) may be existing RMS’s customers but if not, they can use a free Microsoft Rights Management for individuals capability.
The RMS suite also comprises - beyond the available RMS enlightened applications on the market - a set of RMS sharing applications that work on all your common devices, a set of software development kits, and related tooling.
New adds are also provided to AD RMS such as the Mobile Device Extensions add-on (MDE) for AD RMS. This add on lets client applications built to the new V4 RMS SDKs and above interoperate with AD RMS. Another add provides step-by-step guidance to migrate on-premises AD RMS server key and templates to Azure RMS while preserving access to protected content. The guidance contains links to cmdlets and tools for the migration as well as scripts to clean up and reconfigure client devices to Azure RMS.
The white papers available as part of this download covers the various aspects of the RMS offering and provide in-depth information to evaluate or use Azure RMS, AD RMS, and the other components. For an overview of the RMS offering, see the white paper NEW Microsoft Rights Management services.