PKI Blog

When RMS Goes Wrong: Samsung Security Flaw

Posted by Sarah Duncan on Apr 14, 2014 9:57:45 AM

Awhile back, I wrote a post (Shocked by an Android) singing the praises of Samsung for supporting RMS in their native Microsoft Exchange ActiveSync email client for Android. Today, however, I'm here to report on a security flaw we've discovered in that implementation of RMS.

Read More

Topics: Rights Management Services, Samsung security flaw, Android Security flaw, Industry Trends, Microsoft Exchange ActiveSync, RMS, Samsung email, Android, Blog, Android RMS, Samsung

First Look: Microsoft Generic File Protection Explorer

Posted by Sarah Duncan on Feb 14, 2012 4:00:11 AM

One of the things we often run into while working on AD RMS deployments is customers who want to protect documents in formats other than those that are natively supported by AD RMS--Outlook, Word, Excel, PowerPoint, InfoPath and XPS Viewer. Common asks include PDFs, graphics such as JPEGs, and Visio documents. There are third party solutions that can integrate with AD RMS to provide protections on additional document formats, but they represent additional expense and effort. For a customer with just a few other files that need protecting, bringing in a third party solution may not be worth it. Enter Microsoft's Generic File Protection Explorer.

Read More

Topics: Rights Management Services, Active Directory Rights Management Services, IT Security, Microsoft Security Partner, Industry Trends, Microsoft Generic File Protection Explorer, Data Protection, Blog, Active Directory, AD RMS

Configuring a Non-Domain-Joined RMS Client Machine

Posted by Sarah Duncan on Nov 8, 2011 4:08:49 AM

In most corporate environments, when you roll out RMS to the client machines you're talking about domain-joined machines that you are configuring via group policy, SCCM and similar desktop deployment tools. But what if you have a few users who need to have access to RMS-protected content from non-domain-joined clients? What if they need to apply rights-protections to content as well? With your custom templates no less, then what? Under some circumstances, it may be possible to get RMS configured on a non-domain-joined client machine just by asking the user to open a rights-protected document, but whether this will work or not depends on a lot of variables, and it's not a reliable solution. Your best bet is to hand the user an easy-to-run script packaged with your rights policy templates to line all the ducks up in a row automatically.

Read More

Topics: Rights Management Services, Active Directory Rights Management Services, IT Security, Microsoft Security Partner, Microsoft RMS, RMS, Blog, PowerShell script, PowerShell, AD RMS

Posts by Topic

see all

Want to Learn more about CSS?