AD RMS Bulk Protection tool released……..

  • Article

Microsoft never ceases to surprise….does it??

The Product team has released a new RMS Bulk Protection tool that can -

  • Rights Protect the file/s on desktop or Server using a defined RMS Template
  • Decrypt the rights protected file/s
  • Bulk decrypt RMS supported files and items within Outlook PSTs
  • Extensible to other file formats via IRM protector implementation or custom plug-ins
  • can be used with FCI to classify and rights protect the documents

Much desired and awaited utility that can help thousands of users like us.

File Classification index

Windows 2008 R2 server has the feature called File Classification Index (FCI).

FCI allows organizations to scan the Files/folders for content, pattern, keywords, etc and classify them. For e.g. there are certain folders on the Windows 2008 R2 server.

The folder may have documents related to Project A. FCI can be configured to search the folder for document with keyword “Project A” and classify these files are Project A confidential.

Once the FCI has classified the files, RMS Bulk Protection utility can be executed to rights protect these classified files with relevant RMS Template.

So what do we get – completely automated RMS protection with document classification :)

 

More details on FCI can be availed at

https://www.microsoft.com/windowsserver2008/en/us/fci.aspx

 

System Requirements to use the AD RMS Bulk protection tool -

  • Windows XP, Windows Vista, Windows 7, and Windows Server 2008 R2
  • Note:  The tool requires installation of RMS Client SP2 and .NET Framework 2.0 SP2 on Windows XP
  • Outlook 2007 is needed for decrypting items within PST files

 

Syntax to use AD RMS Bulk protection tool

The syntax to execute the RMS Bulk Protection tool is -

RMSBulk [/decrypt location] [/encrypt location rms_template [owner_email]] [/log log_file [/append] [/simple]] [/preserveattributes] [/silent]

 

where -

  /decrypt location: Decrypt all RMS protected content under location

  /encrypt location rms_template [owner_email]: Encrypt all content under location to rms_template and grant owner_email OWNER right

  /log log_file: Log output to log_file

  /append: Append output to log_file

  /simple: Simple single-line logging

  /preserveattributes: Preserve all file attributes

  /silent: Disable console output

 

Example of this commands are available help file….

  • RMSBulk.exe /decrypt \\Share\Folder /log RMSBulk.log
  • RMSBulk.exe /encrypt C:\Documents\Folder C:\RMSTemplates\Template.xml  /log C:\Logs\RMSBulk.log
  • RMSBulk.exe /encrypt \\Share\file.doc ContosoConfidential.xml joe@contoso.com  /log C:\Logs\RMSBulk.log /append /simple /preserveattributes

 

In coming few days, I am going to put in steps to show you the FCI and RMS Bulk protection tool integration and some video demonstrating the same too.

Keep looking for the update to this blog… :)