8.14. Introducing Active Directory Rights Management Services and File Protection

Active Directory Rights Management Services and File Protection (AD RMS) allows individual users to assign privileges to files. Once these permissions are assigned, they are correspondingly checked with an AD RMS server (powered through Microsoft SQL Server) to check the qualifications of users against an AD RMS client. This client is built into Windows Server 2008 and Windows Vista and is available for download with Windows XP.

With AD RMS, users can define three different components that comprise an AD RMS usage policy:

Trusted entities

These include trusted users who can access given files for an AD RMS group.

Usage rights

These include file permissions dictating ...

Get MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.