Overview of Active Directory Rights Management Services with Windows Server 2008 R2

מק"ט: #50404 | משך קורס: 16 שעות אק'

This two-day instructor-led course provides students with the knowledge to understand the role that Microsoft Active Directory Rights Management Services (AD RMS) plays in a wider infrastructure, and how it interacts with other Microsoft technologies.

*שדות חובה
PDF version

מטרות הקורס

After completing this course, students will be able to:

  • Understand AD RMS architecture, and the role the product plays as part of a wider infrastructure.
  • Understand the AD RMS interaction model with other Microsoft technologies.
  • Understand how several other Microsoft technologies use AD RMS to protect documents and email messages.
  • Understand how to use AD RMS on server applications such as Microsoft Office SharePoint Server and Microsoft Exchange Server.
  • Create, manage, and distribute rights policy templates as an AD RMS administrator.
  • Understand the different trust relationships that can extend AD RMS protection beyond your infrastructure.

קהל היעד

This course is intended for experienced systems administrators who have working experience and background knowledge of Windows Server 2008, and basic understanding of Active Directory, IIS, Microsoft SQL Server, and Microsoft Exchange Server technologies.

תנאי קדם

Before attending this course, students must have:

  • Working experience and background knowledge of Windows Server 2008.
  • Basic understanding of Active Directory, IIS, Microsoft SQL Server, and Microsoft Exchange Server technologies.
  • Basic knowledge of DNS, general networking, and PKI principles is also suggested.


Module 1: Why Rights Management

This module provides an overview of Microsoft Active Directory Rights Management Services (AD RMS). The overview describes how the product works, the business reasons for using AD RMS, and the technology that you use to deploy an AD RMS environment.


Module 2: AD RMS Architecture, Installation, and Provisioning

This module covers the basic architecture and concepts of AD RMS. Most of the concepts introduced in this module will be covered in more detail in other modules later in the course. The student will also learn the procedure for deploying AD RMS servers, as well as the permissions required for the accounts that are used in the deployment and management of AD RMS.


Module 3: Active Directory Rights Management Clients and Information Rights Management on Desktop Applications

This module begins by describing the AD RMS client software, its requirements, and how to deploy it. Next, the module identifies the rights management components on client machines and the bootstrapping process the AD RMS client performs for each user. The module then discusses how Information Rights Management (IRM) is provided in the Microsoft Office system, the XPS format, Window Mobile 6.0, and read-only access in Windows Internet Explorer. The module ends with a discussion of registry keys in AD RMS.


Module 4: Rights Policy Templates and the Super Users Group

This module provides an introduction to rights policy templates and the concepts regarding protecting and consuming content that is protected by templates. These templates are used to standardize security policies and protect information according to the latest policy.


Module 5: Information Rights Management on Server Applications

This module shows how AD RMS integrates with server-side applications, that use AD RMS to automatically protect and license content. This module covers the following server products:
Microsoft Office SharePoint Server (MOSS) 2007
Microsoft Exchange Server 2010
AD RMS Bulk Protection Tool + FCI


Module 6: Managing Trust

This module discusses the trust architecture in AD RMS, how trusted user domains operate, and the types of trusts that are available—including Active Directory Federation Services (FS).