Active Directory Rights Management Services help individuals enforce their personal preferences concerning the transmission of personal or private information, in addition to helping organizations enforce corporate policy governing the control and dissemination of confidential or proprietary information.
AD RMS has server and client components. The server component is made up of multiple web services that run on a Microsoft server. The client component, which can either be run on a client or server operating system, contains functions that enable an application to encrypt and decrypt content, acquire licenses and certificates from a server and perform many other security-related tasks.
Microsoft made significant changes to AD RMS in Windows Server 2012. These changes included an updated set of SQL Server requirements, Server Core support, a remote deployment option and an option to deploy with PowerShell commands.
AD RMS can be used to augment the security strategy for your organization by protecting documents using information rights management (IRM).
AD RMS allows individuals and administrators through IRM policies to specify access permissions to documents, workbooks, and presentations. This helps prevent sensitive information from being printed, forwarded, or copied by unauthorized people. After permission for a file has been restricted by using IRM, the access and usage restrictions are enforced no matter where the information is, because the permission to a file is stored in the document file itself.
AD RMS and IRM help individuals enforce their personal preferences concerning the transmission of personal or private information. They also help organizations enforce corporate policy governing the control and dissemination of confidential or proprietary information.
