The AD RMS team recently had some inquiries on behalf of our customers about how to design an AD RMS solution that supports client-side storage of encryption keys and certificates. So we looked into it and now have an update on this topic that was just...

When using the Active Directory Rights Management Services Bulk Protection Tool (http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=11122) with Microsoft Outlook 2007 or 2010 Personal Store (.pst) files, you may experience a file...

There is now an Active Directory Rights Management Frequently Asked Questions AD RMS FAQ on the TechNet Wiki. Please, feel free to review, contribute to, and update this FAQ. Great thanks to Enrique Saggese for answering the vast majority of these questions...

Hello, Alexey here again. Today I want to start the deep diving into client bootstrapping. Client bootstrapping occurs the first time each AD RMS user tries to protect or consume protected content (such as documents or messages) on an AD RMS client...

Today I'm acting as a conduit for one of the many AD RMS experts at Microsoft. Thanks to Alexey for sharing his knowledge about the inner workings of RMS! First of all let me introduce myself. My name is Alexey Goldbergs and I’m a Technology...

Service Pack 1 for Microsoft Windows Server 2008 R2 provides a very cool new feature in AD RMS: You can federate with organizations running Microsoft Exchange Server 2010 through the Microsoft Federation Gateway. In case you haven't heard about the Microsoft...

There's a new article in the TechNet Wiki that explains the purpose of the various reports you can generate in AD RMS: http://social.technet.microsoft.com/wiki/contents/articles/ad-rms-reports.aspx . It's a start, but we've put it in the Wiki so you can...

The AD RMS setup wizard assumes that the SQL database server you use for the AD RMS configuration and logging databases is listening on the standard SQL TCP port, 1433. If your SQL server is configured to use a different port, this can create problems...

As a technical writer assigned the task of creating and maintaining documentation for AD RMS in the TechNet Library ( http://technet.microsoft.com/en-us/library/cc771234.aspx ), I like to think that our docs are the best place to go to get information...

When the RMS v1 SP2 client is installed the following folder is automatically created on the machine: %allusersprofile%\AppData\Microsoft\DRM\Server. This folder is created to allow non-admin users, such as Network Service, to create the <sid> folder...

Before you implement AD RMS you may want to test it in a test environment that mirrors your production environment. This post will help you in this process. First, you must decide how you will use AD RMS in your organization so that you will know what...

AD RMS integrates with Microsoft Windows Mobile beginning with Windows Mobile 6. End users can create and consume protected e-mail messages and can read protected Microsoft Office documents on their Windows Mobile device. The AD RMS team has recently...

Perhaps you would like to provide different AD RMS rights policy templates to different users in your organization. For example, maybe users in your legal department need certain templates specific to their needs, but these templates would be inappropriate...

The AD RMS team has posted some new videos on TechNet Edge that walk through a few of the AD RMS Step-by-step guides located on TechNet. These videos mirror the steps from the guide and provide additional insight and best practices for deploying in a...

Perhaps you have decided to implement AD RMS in your organization and need to decide whether to install AD RMS on a virtual server using Hyper-V or on a physical server. Or, perhaps you tested AD RMS using Hyper-V, but will be installing it on a physical...

If you are unable to locate your AD RMS performance counters through the Performance Monitor on your AD RMS server, the problem may be caused by a third-party driver. Some third party drivers, if they are installed before AD RMS is provisioned, can affect...

Our partners GigaTrust and Liquid Machines have extended AD RMS support to BlackBerry devices. After implementing either company's solution, BlackBerry users in your organization can create and consume protected content using the rights policy templates...

Here are a few best practices to keep in mind when installing Active Directory Rights Management Services (AD RMS): Use dedicated AD RMS servers. Installing AD RMS on the same server as a domain controller, Microsoft Exchange Server, Certification...

The information stored in the AD RMS logging database can be very useful to administrators who want to gather insight about the health and usage of their organization's AD RMS cluster. Peter Gilson, a Senior Software Design Engineer in Test at Microsoft...

Once your AD RMS installation is in place your end users can begin creating and consuming protected content using AD RMS aware applications. The purpose of this post is to explain what Microsoft applications support AD RMS protection, and to explain how...

Once you have implemented an AD RMS infrastructure in your organization, end users can create and consume IRM-protected documents and e-mails using AD RMS-aware applications such as Microsoft Outlook and Microsoft Word. AD RMS is a server role that makes...

Once your AD RMS infrastructure is in place, users in your organization can begin to protect documents and e-mail messages using AD RMS-aware applications, such as Microsoft Outlook and Microsoft Word. This blog post is meant to provide you with resources...

This is the second post in a series examining the different options available to share protected content with partner organizations. Our first post, discussed sharing protected content with a partner who has an Active Directory Rights Management Services...

Typically, Active Directory Rights Management Services helps users to protect documents and securely share them with other users within a single Active Directory forest. However, it is increasingly common that users need to share sensitive documents with...

In a new webcast available on the AD RMS TechNet Edge site Olav Opedal, a Microsoft Senior Security Program Manager in the Information Security Operations Group, discusses how Microsoft uses AD RMS, RSA Data Loss Prevention, File Classification Infrastructure...