Advanced Windows PowerShell Scripting Video Training

Advanced Windows PowerShell Scripting Video Training
Advanced Windows PowerShell Scripting Video Training

Wednesday, September 22, 2010

How to prevent users from doing a Copy and Paste in AD RMS protected content.

AD RMS allows your users to establish rules to determine who in an organization can do what with the content the user generates. This in no way takes away the administrators control of network security. It simply allows the user to determine the appropriate level of access for other users with out the intervention of the IT staff. When dealing with compliancy or confidential material, AD RMS can allow you to meet stringent guidelines.

There are many different rights that can be assigned to content. Different applications may interpret the rights differently so testing is advisable prior to deploying to your organization. The AD RMS right that controls the copy / paste functionality is Extract. The list below summarizes the AD RMS rights.

  • Full Control – If granted, this right allows a user to exercise all rights in the license, whether or not the rights are specifically granted to that user.
  • View – If this right is granted, the AD RMS client allows protected content to be decrypted. Typically, when this right is granted, the application will allow the user to view protected content.
  • Edit - If this right is granted, the AD RMS client allows protected content to be decrypted and then re-encrypted by using the same content key. Typically, when this right is granted, the application will allow the user to change protected content and then save it to the same file. This right is effectively identical to the Save right.
  • Save - If this right is granted, the AD RMS client allows protected content to be decrypted and then re-encrypted by using the same content key. Typically, when this right is granted, the application will allow the user to change protected content and then save it to the same file. This right is effectively identical to the Edit right.
  • Export (Save As) - If this right is granted, the AD RMS client allows protected content to be decrypted and then re-encrypted by using the same content key. Typically, when this right is granted, the application will allow the user to use the “Save As” feature to save protected content to a new file.
  • Print - Typically, when this right is granted, the application will allow the user to print protected content.
  • Forward - Typically, when this right is granted, the application will allow an e-mail recipient to forward a protected message.
  • Reply - Typically, when this right is granted, the application will allow an e-mail recipient to reply to a protected message and include a copy of the original message.
  • Reply All - Typically, when this right is granted, the application will allow an e-mail recipient to reply to all recipients of a protected message and include a copy of the original message.
  • Extract - Typically, when this right is granted, the application will allow the user to copy and paste information from protected content.
  • Allow Macros - Typically, when this right is granted, the application will allow the user to run macros in the document or use an editor to modify macros in the document.
  • View Rights - If this right is granted, the AD RMS client allows a user to create a new publishing license from the existing license, but the content key is not preserved.
  • Edit Rights - If this right is granted, the AD RMS client allows a user to edit the user rights that are assigned by the license while keeping the same content key.

http://technet.microsoft.com/en-us/library/dd996658(WS.10).aspx

No comments: