Enterprise Mobility and Security Blog


Message truncation when decrypting Outlook .Personal Store (.pst) files using the AD RMS Bulk Protection Tool

(This blog post was first published on the original RMS team blog in July 2011.) When using the ActiveDirectory Rights Management Services Bulk Protection Tool (http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=11122)with Microsoft Outlook 2007 or 2010 Personal Store (.pst) files, you mayexperience a file truncation problem if Microsoft Outlook is set to process filesasynchronously. To prevent this issue, you can...

Continue reading

Have a question about AD RMS?

If you have a frequently asked question (FAQ) about Active Directory Rights Management Services (AD RMS), you will definitely want to start check out the updated AD RMS FAQ on the TechNet Wiki. Check it out at: http://social.technet.microsoft.com/wiki/contents/articles/ad-rms-faq.aspx And please feel free to review, contribute to, and update this FAQ article if the mood strikes...

Continue reading

AD RMS FAQ update – Can encryption keys or certificates be stored on SmartCards or hardware service modules?

(This post was published on the original RMS team blog in September 2011.) The AD RMS team recently had some inquiries on behalf of our customers about how to design an AD RMS solution that supports client-side storage of encryption keys and certificates. So we looked into it and now have an update on this...

Continue reading

AD RMS Reporting

(This post was published on the original RMS team blog in February 2011.) There’s a new article in the TechNet Wiki that explains the purpose of the various reports you can generate in AD RMS: http://social.technet.microsoft.com/wiki/contents/articles/ad-rms-reports.aspx. It’s a start, but we’ve put it in the Wiki so you can share with others how you’ve found...

Continue reading

Decommissioning AD RMS

(This post was published on the original RMS team blog in February 2010.) If you plan to remove Active Directory Rights Management Services from your organization, you should first decommission the AD RMS cluster.  This allows your AD RMS users to remove AD RMS protection from existing content.  If you uninstall AD RMS without first...

Continue reading