OFC290

Information Rights Management in Microsoft Office 2003

Lauren AntonoffGroup Program Manager

Agenda

What is Information Rights Management?Technology OverviewDeploymentDemos

Outlook 2003Word 2003Outlook Web AccessRights Management Add-on for Internet Explorer

What Is Information Rights Management?

Information Rights Management gives authors control over how people use the documents and e-mail they send

Designed for sensitive communicationsNot every document or mail will use IRM

IRM is NOT about security

IRM In Office 2003

“Do Not Forward” e-mailOne-click (like “High Importance” red bang)

“Do Not Distribute” documentsProvides more granularity

Access can be Read, Change, or Full Control

Additional options include printing and editing

Expiration

Selecting Users

Uses individual or group e-mail addressesGroup membership can change over time without modifying individual documents

Outlook automatically uses recipients from the address lines

Document use permission dialog similar to Outlook addressing

IRM Permission Policies

Default policyE-mail: “Do Not Forward”

Documents: “Do Not Distribute”

Server-based policies specify permissionsEnables e-mail to be shared w/in group

Lets corporation set best practices

Can be updated dynamically

Provides corporate policy branding“Company Confidential”, “Marketing – All”, “Expires in 60 Days”

Extranet Access

Supports license acquisition through firewalls

Enables IRM with OWA or Outlook connecting to Exchange with RPC/HTTP

Supports cross-company trust

Inter-op with Non-IRM Apps

IRM content contains down-level messageOutlook Express shows IRM message as e-mail with an attachment

Message text describes IRM and links to additional information and RMA

Word 2002 shows generic documentDocument describes IRM and links toadditional information

Links to RMA if HTML is included

Offline

Applying IRM works without a connection

Network connection required to obtain permissions for received content

Once obtained, permissions stored for offline use

Outlook automatically obtains permissions during synchronization for offline viewing of IRM e-mail

Components

Microsoft Office 2003Application level policy enforcement

Windows Rights Managements ClientClient APIs between application and RM Service

Windows Rights Management ServiceProcesses requests from the RM Client

Usually hosted by the organization

Microsoft provides free Passport-based trial service

Rights Management Add-on for IE (RMA)For users without Office 2003

RM Overview

License RequestLicense Request

RecipientRecipient

Receive E-mail or Obtain DocumentReceive E-mail or Obtain Document

UserUserEnrollmentEnrollment

Service Enrollment and Service Enrollment and Machine Activation ProxyMachine Activation Proxy

MicrosoftMicrosoftHostedHosted

ServicesServicesCorporate RMCorporate RMServiceService

Sender/AuthorSender/Author

Enterprise Deployment

BenefitsCorporate control over all contentNT authentication to identify usersIntegration with AD and DL supportAdmins-defined “permission policies” that appear in Office UI

Office 2003 IRM Deployment

DesktopsInstall Microsoft Office 2003

Optionally deploy RMAInstall the Windows RM Client components

Can be chained to the Office 2003 installationActivation and certificate distribution

Can be administrated through logon script or on-demand on first useActivation proxied through corporate serverTransparent to end-user

Deploy IRM Permission PoliciesSMS, login script, etc.

Windows Rights Management Services (RMS)Scales from one server to large clustersRequires Active DirectoryOther sessions go into this in more detail

Administration

Deployment policy optionsDisable IRM controls to prevent use of IRM

Block access to free Passport-based service

Automatically include HTML in IRM content

Do not cache content licenses

Permission policy location

License service redirection

Data recoverySuper-user

Decommissioning

IRM Documents in Microsoft Word 2003

demodemo

IRM E-Mail in Outlook Web Access

demodemo

Rights Management Add-On for Internet Explorer

Enables staged deployments and cross-company communication

Supports Windows 2000 and Windows XP with Internet Explorer 6.0

Extended platform support for final release

Available as a free Windows Update download from Microsoft

Rights Management Add-on for Internet Explorer

demodemo

Free Trial Service

Makes it easy for enterprise IT to evaluate the feature before opting-in

Relies on Passport authentication

Admins can disable this to retain complete control over IRM of content

Can provide a convenient way for users to collaborate across corp boundaries

Ask The ExpertsGet Your Questions Answered

I will be available:Wednesday from 15:30 – 16:30

Thursday 11:30 – 12:30

Additional Information

Office 2003 Review’s Guidehttp://www.microsoft.com/office/preview/editions/guide.asp

Press Release - Windows Rights Management Services for Windows Server 2003

http://www.microsoft.com/presspass/press/2003/feb03/02-21RMSForWindowsServerPR.asp

White Paperhttp://www.microsoft.com/windowsserver2003/techinfo/overview/wrm.mspx

Overviewhttp://www.microsoft.com/windowsserver2003/rm/

Rights Management Add-on for Internet Explorerhttp://www.microsoft.com/windows/ie/downloads/addon/default.asp

Steve Ballmer’s E-Mail About Rights Managementhttp://www.microsoft.com/mscorp/execmail/2003/05-07rightsmanagement.asp

Community Resources

Community Resourceshttp://www.microsoft.com/communities/default.mspx

Most Valuable Professional (MVP)http://www.mvp.support.microsoft.com/

NewsgroupsConverse online with Microsoft Newsgroups, including Worldwidehttp://www.microsoft.com/communities/newsgroups/default.mspx

User GroupsMeet and learn with your peershttp://www.microsoft.com/communities/usergroups/default.mspx

evaluationsevaluations

© 2003 Microsoft Corporation. All rights reserved.© 2003 Microsoft Corporation. All rights reserved.This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.