Lead Image © vska, 123RF.com
Microsoft Active Directory Rights Management Services
Know Your Rights
One of the most dreaded calls to be received by an IT administrator is that a former employee is suspected of stealing intellectual property or financial or personal data. Your task is now to discover the extent of the data loss. Although many large organizations benefit from the data loss prevention (DLP) technologies built into modern cloud offerings such as Microsoft 365 E5 licencing and Azure Rights Management, it is fair to say that not all organizations have the budget to implement such solutions, leaving them exposed to the real risks of data loss.
Implementing DLP strategies and solutions can be extremely expensive, but Microsoft has some built-in tools that could be deployed to help alleviate the risks of data loss, even if you have a limited budget. One such tool is Microsoft Active Directory Rights Management Services (AD RMS).
Microsoft AD RMS
Microsoft AD RMS is an on-premises information protection technology that helps organizations protect data from unauthorized access. AD RMS was first introduced in Microsoft Windows Server 2003 and is available as a built-in role in all major versions of Windows Server operating systems, up to and including Windows Server 2025. Although AD RMS is considered a legacy technology compared with modern solutions such as Azure Rights Management, it is fair to say that AD RMS can still play a major part in any DLP strategy, especially if the majority of your data is still hosted on in-house file servers and file shares.
As the name suggests, AD RMS requires an Active Directory domain environment, and the server running the AD RMS role needs to be domain joined. AD RMS should not be installed on a domain controller, and the recommended best practice would be to set up a dedicated server cluster for it, with a minimum of two AD RMS servers for resiliency and high availability. Installing the AD RMS role (
...
Buy this article as PDF
(incl. VAT)
Buy ADMIN Magazine
US / Canada
UK / Australia
Related content
-
Optimizing domain controller security
Configure your domain controller security settings correctly with Policy Analyzer and current Microsoft baselines for a leak-tight Active Directory. -
Microsoft Network Policy Server
Redmond's RADIUS implementation connects systems and provides secure authorization and logging. -
Group policies on Windows Server 2022
We discuss how to manage and secure clients with group policy object templates and look at some recommendations from various governmental and non-governmental security advocates. -
Protect Hyper-V with on-board resources
With the right settings and small tools, security in virtual environments can be increased significantly by tweaking the on-board tools. -
Data loss prevention with Microsoft Purview
Microsoft Purview combines compliance and data governance to address the security of confidential data in the new hybrid working world.
Subscribe to our ADMIN Newsletters
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Most Popular
Support Our Work
ADMIN content is made possible with support from readers like you. Please consider contributing when you've found an article to be beneficial.
