OFC 290 Information Rights Management in Microsoft Office

OFC 290 Information Rights Management in Microsoft Office 2003 Lauren Antonoff Group Program Manager

Agenda What is Information Rights Management? Technology Overview Deployment Demos Outlook 2003 Word 2003 Outlook Web Access Rights Management Add-on for Internet Explorer

What Is Information Rights Management? Information Rights Management gives authors control over how people use the documents and e-mail they send Designed for sensitive communications Not every document or mail will use IRM is NOT about security

IRM In Office 2003 “Do Not Forward” e-mail One-click (like “High Importance” red bang) “Do Not Distribute” documents Provides more granularity Access can be Read, Change, or Full Control Additional options include printing and editing Expiration

Selecting Users Uses individual or group e-mail addresses Group membership can change over time without modifying individual documents Outlook automatically uses recipients from the address lines Document use permission dialog similar to Outlook addressing

IRM Permission Policies Default policy E-mail: “Do Not Forward” Documents: “Do Not Distribute” Server-based policies specify permissions Enables e-mail to be shared w/in group Lets corporation set best practices Can be updated dynamically Provides corporate policy branding “Company Confidential”, “Marketing – All”, “Expires in 60 Days”

Extranet Access Supports license acquisition through firewalls Enables IRM with OWA or Outlook connecting to Exchange with RPC/HTTP Supports cross-company trust

Inter-op with Non-IRM Apps IRM content contains down-level message Outlook Express shows IRM message as e-mail with an attachment Message text describes IRM and links to additional information and RMA Word 2002 shows generic document Document describes IRM and links to additional information Links to RMA if HTML is included

Offline Applying IRM works without a connection Network connection required to obtain permissions for received content Once obtained, permissions stored for offline use Outlook automatically obtains permissions during synchronization for offline viewing of IRM e-mail

Components Microsoft Office 2003 Application level policy enforcement Windows Rights Managements Client APIs between application and RM Service Windows Rights Management Service Processes requests from the RM Client Usually hosted by the organization Microsoft provides free Passport-based trial service Rights Management Add-on for IE (RMA) For users without Office 2003

RM Overview Microsoft Hosted Services Corporate RM Service Enrollment and Machine Activation Proxy User Enrollment License Request Receive E-mail or Obtain Document Sender/Author Recipient

Enterprise Deployment Benefits Corporate control over all content NT authentication to identify users Integration with AD and DL support Admins-defined “permission policies” that appear in Office UI

Office 2003 IRM Deployment Desktops Install Microsoft Office 2003 Optionally deploy RMA Install the Windows RM Client components Can be chained to the Office 2003 installation Activation and certificate distribution Can be administrated through logon script or on-demand on first use Activation proxied through corporate server Transparent to end-user Deploy IRM Permission Policies SMS, login script, etc. Windows Rights Management Services (RMS) Scales from one server to large clusters Requires Active Directory Other sessions go into this in more detail

Administration Deployment policy options Disable IRM controls to prevent use of IRM Block access to free Passport-based service Automatically include HTML in IRM content Do not cache content licenses Permission policy location License service redirection Data recovery Super-user Decommissioning

demo IRM Documents in Microsoft Word 2003

demo IRM E-Mail in Outlook Web Access

Rights Management Add-On for Internet Explorer Enables staged deployments and cross-company communication Supports Windows 2000 and Windows XP with Internet Explorer 6. 0 Extended platform support for final release Available as a free Windows Update download from Microsoft

demo Rights Management Add-on for Internet Explorer

Free Trial Service Makes it easy for enterprise IT to evaluate the feature before opting-in Relies on Passport authentication Admins can disable this to retain complete control over IRM of content Can provide a convenient way for users to collaborate across corp boundaries

Ask The Experts Get Your Questions Answered I will be available: Wednesday from 15: 30 – 16: 30 Thursday 11: 30 – 12: 30

Additional Information Office 2003 Review’s Guide http: //www. microsoft. com/office/preview/editions/guide. asp Press Release - Windows Rights Management Services for Windows Server 2003 http: //www. microsoft. com/presspass/press/2003/feb 03/ 02 -21 RMSFor. Windows. Server. PR. asp White Paper http: //www. microsoft. com/windowsserver 2003/techinfo/overview/ wrm. mspx Overview http: //www. microsoft. com/windowsserver 2003/rm/ Rights Management Add-on for Internet Explorer http: //www. microsoft. com/windows/ie/downloads/addon/default. asp Steve Ballmer’s E-Mail About Rights Management http: //www. microsoft. com/mscorp/execmail/2003/ 05 -07 rightsmanagement. asp

Community Resources http: //www. microsoft. com/communities/default. mspx Most Valuable Professional (MVP) http: //www. mvp. support. microsoft. com/ Newsgroups Converse online with Microsoft Newsgroups, including Worldwide http: //www. microsoft. com/communities/newsgroups/default. mspx User Groups Meet and learn with your peers http: //www. microsoft. com/communities/usergroups/default. mspx

evaluations

© 2003 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.