How to integrate AD RMS with Exchange 2010 SP2(Part 1)

Exchange 2010 provides some kind of security features like TLS in order to secure the communication in a network by a mean of encryption and Email encryption by using the S/MIME to encrypt the messages.

Unfortunately, the traditional features have some limitations. Besides, the company deals with critical data that may contain business information or financial reports… And users rely on their Mailboxes to send this data to each other. So, Exchange server provide a new feature known as IRM.

What’s IRM?

Information Right Management “IRM”, apply persistent protection  to messages and attachments ( MS office or enabled IRM applications) in Exchange server. With IRM you can :

• User can’t forward, modify, print, fax, save, or cut and paste the content of a message or an attachment.
• User can’t view an IRM protected message or attachment after a specified period.
• User can’t use a windows snipping tool to copy the content of an IRM protected message.

With IRM you can’t:

• Prevent users from using a third party tools to capture screen
• Prevent users from using imaging devices to photograph an IRM protected message.
• Prevent users from remembering and then typing the content of an IRM protected message.

IRM rely on Active Directory Right Management Server, a role in windows server 2008. In the next article, we will begin the deployment of IRM and we will start by implementing AD RMS.