Enterprise Mobility and Security Blog

RSS

Hi everybody

As per Carol’s introduction post, she's letting you know what's new and hot in the docs for this month.

Reminders: Follow us on twitter (@TheRMSGuy) and join in our RMS peer community at www.yammer.com/AskIPTeam.

Cheers, 

   Dan (on behalf of the RMS team)


The Documentation Library for Azure Rights Management has been updated on the web and the latest content has Updated: August 1, 2015 (or later) at the top of the page.

Summary of the documentation available: Getting Started with Rights Management | Configuring Rights Management | Using Rights Management | Administering Rights Management by using Windows PowerShell

Plus, the Rights Management sharing application guides (admin guide and user guide) and FAQs (for Windows and mobile platforms).

This month sees updated documentation published for the RMS Protection cmdlets, installed with the RMS Protection Tool. This updated information replaces the original PDF that was included when the tool first released in June. Expect the help file that is used with the Get-Help commands to be replaced soon. The new help file has additional examples and includes the online parameter for each cmdlet, so that you can always check for the latest information online (and localized versions, when available). 

On the RMS Protection cmdlets page, you'll find the latest system requirements, current limitations, and the usual table of links for each of the cmdlets. The getting started information that was in the original PDF has been moved to two new "about" help topics—about_RMSProtection_AzureRMS for Azure RMS, and about_RMSProtection_ADRMS for AD RMS. Both of these include any additional prerequisites for their respective deployment platform, and an end-to-end walkthrough for typical scenarios.

One other update this month that's worthy of particular notice is a new section we've added to the main page of the Azure Rights Management documentation, which we named Also known as …  We've known for a while that our history of rebranding Azure Rights Management has left people very confused about the name—which is not at all surprisingly, considering how many times this service (and its predecessors) have been renamed! 

Unfortunately, old references aren't always updated, which leaves a confusing array of possible names and abbreviations that include "Windows Azure Active Directory Rights Management Service", "Windows Azure AD Rights Management", and "AADRM" (which you still see in the cmdlets for Azure Rights Management)—and other combinations. Many people get confused about what the "S" stands for, in the widely used "Azure RMS" abbreviation … is it "Services", "Service", or "service"?  We've even seen "Suite" and "System".  When people get the name wrong, other people then copy it, and the confusion grows. The upshot is, when people search using one of the old names (or an incorrect name), it makes it very hard to find the current documentation.

There's no perfect solution here, but we're trying this Also known as … section on the main page, in which we include the old names, as well as put some context around the name changes. We're hoping that this might work as a safety net for people searching with an old name, will act as an authoriative reference for people who want to make sure they are using the correct name in their documentation and presentations, and maybe even provide some interesting background information that helps people understand and remember the official name of "Azure Rights Management".  If this is successful, you could see this Also known as section in other product documentation that has similar problems with (re)naming! 

We value customer feedback and try to incorporate it when possible.  Although we can't promise to make the docs perfect for everybody, we are committed to continual improvement.  If you have any feedback about the documentation for the RMS Protection cmdlets, the new "Also known as .." section, the RMS sharing application, or for the Azure RMS docs in general, email AskIPTeam@Microsoft.com.

 

What's New for the RMS Sharing Application Documentation, August 2015

There are no technical changes to the sharing application documentation since the last update (June 2015), except to update the Rights Management sharing application: Version release history to reflect the new refresh period of 1 day for templates, which went into the last version.

 

What's New in the Documentation Library for Azure Rights Management, August 2015

The following information lists the topics that contain significant changes since the last update (July 2015).

 Azure Rights Management

– New section, Also known as … to help clarify the official service name, as well as its history and relationship with Office and the subscriptions that include Azure RMS.

Requirements for Azure Rights Management

– Updated the Client device capabilities section, to add Gaaiho Doc, which support Protected PDF for Windows, and Outlook for iPad and iPhone for iOS.

Frequently Asked Questions for Azure Rights Management

– New entry:

  • Can I add users from outside my company to custom templates?

Activating Azure Rights Management

– Updated to clarify that onboarding controls can be configured either before or after you activate Azure RMS. Also clarified that these controls are for client applications, such as Word and the RMS sharing application. Server-side applications, such as Exchange, can implement their own per-user controls for RMS integration to achieve the same result.

Configuring Custom Templates for Azure Rights Management

– Updated the Refreshing templates for users section, to reflect the new default refresh period of 1 day for the RMS sharing application. Because this update also applies to AD RMS clients, this update is also reflected in the RMS Client Settings section of the RMS Client Deployment Notes.

Configuring Applications for Azure Rights Management

– Expand the Exchange Online: IRM Configuration section to see the newly included reference to protected voice mail (Unified Messaging).  Also added a new subsection, for Office 365 Message Encryption.

Configuring Super Users for Azure Rights Management and Discovery Services or Data Recovery

– Updated with a new section for security best practices with example log entries for monitoring super user administrative commands. Also added a note to the scripting options section, that the RMS Protection tool does not yet support super users; instead you can use a service principal account to authenticate to Azure RMS.

New-AadrmRightsDefinition

– Updated the Rights parameter, for the missing values related to email (FORWARD, REPLY, REPLYALL).