Demos
Sharing a document B2B
Protected email with Policy Tips
Departmental Templates
Mac Outlook
Protected PDF
OneDrive / SharePoint
Document Tracking Portal (Preview)
Demos… continued
Admin Reporting (Preview)
Onboarding Controls
CAD integration
RMS Partner Offerings
Classification (Concept)
Partner Offerings
Secude SAP Protection
TITUS Office clients
Watchful Classification
Gigatrust PDF and Email
Sharing a document B2B
Protected email with Policy Tips
Office apps integrates with RMS
Office 365 integrates with RMS
• Powerful rules-based policies can enforce the
automatic application of RMS to email and
documents that include sensitive information.
• Protect SharePoint document libraries with onexit protection of documents
• Enforce Data Loss Protection policies in e-mail
with content scanning including attachments
Office 365 integrates with RMS
A simple yet powerful rules generation
experience with pre-canned templates makes
it easy to quickly implement and provision
data protection policies
Departmental Templates
Administrator defines a departmental template:
What a Marketing user sees:
What a other users see:
Mac Outlook IRM support
RMS Protected PDF Experiences
OneDrive for Business with IRM
SharePoint Protected Libraries
SharePoint Online with RMS – Protected Document Library
SharePoint Online with RMS –Content is protected as it is opened
SharePoint Online with RMS – Enable RMS on Doc. Library
Document Tracking Portal
(Preview)
Microsoft Confidential - EU RMS User Group / Oct 2014
26
Microsoft Confidential - EU RMS User Group / Oct 2014
27
Microsoft Confidential - EU RMS User Group / Oct 2014
28
Microsoft Confidential - EU RMS User Group / Oct 2014
29
Microsoft Confidential - EU RMS User Group / Oct 2014
30
Microsoft Confidential - EU RMS User Group / Oct 2014
31
Microsoft Confidential - EU RMS User Group / Oct 2014
32
Administrative Reporting
(Part of Azure AD Premium)
Onboarding Controls
Azure RMS Onboarding controls
• Azure RMS onboarding controls are disabled by default
• All users and applications can consume and protect content
• Can be enabled via PowerShell: set-AADRMOnboardingControls
• Two modes of operation:
1- Only users with an Azure RMS license can protect content
2- Only users that are members of a specified group can protect content
(the two options can be combined)
• Enabling either option blocks protection from non-allowed clients
• Consumption is always allowed regardless of onboarding controls
Enabling onboarding controls, examples:
Enable license assignment enforcement:
Disable license assignment enforcement and enable group-based control
CAD with RMS Support
http://www.microsoft.com/enterprise/industry/manufacturing-and-resources/discrete-manufacturing/articles/jt2go-for-windows-8-facilities-mobility-processes-for-leading-enterprises.aspx
Partner Offerings
Protecting data leaving SAP
TITUS clients
Watchful Classification
Gigatrust PDF
Secude: Protecting data leaving SAP
TITUS: RMS-enlightened Email Client
TITUS: RMS-enlightened Secure Doc Container
Watchful: Deep Office integration
This memo pertains to our 2013 Business Plan, our Financial Projections in connection with our Opportunity Pipeline, and our
estimated budgetary expenditures required to address that pipeline. Please treat this information as Company Confidential.
Highlights of the projected 2013 Fiscal Year driven by this pipeline report (attached) include:
REVENUE (k)
$ 27,432
GM%
93.3%
OPEX
$ 12,417
$ 13,177
EBITDA
Note that there were exceptional one-time charges incurred in connection with the restructuring that was approved by the Board of
Directors and subsequently ratified by the Shareholders via a Shareholder Resolution
Don’t worry, this message was automatically classified and encrypted for me…I didn’t have to do anything…now that we are using the new
RightsWATCH solution that works with Microsoft RMS. And the report itself is dynamically watermarked and encrypted…very easy!!
Gigatrust: RMS Protected PDF and much more
Override-able Classification
Concept Only / Discussion Aid
No release plan in place
Classification
ADMINISTRATOR
No opinion
Strong Opinion
No
need for protection
Templates
Defined by
the Admin
Ad-hoc Policy
Defined by
the user
Templates
with user
customization
USER:
• CSOs don’t always know
what 5% of their docs are
sensitive
No opinion
• Users don’t like to classify
• Classification = Protection
is a simplifying assumption
Strong
Opinion
• Automation (tooling) can
scale up the challenge of
‘scoped templates’
Microsoft Confidential - EU RMS User Group / Oct 2014
52
Bare essential classification
John composes an email and wants to ‘share protected’
The document is not classified. David classifies it.
David reviews and protects the document
Guided use of Templates
An organization defines templates for all users.
The user leverages core constructs to build flexible new (compliant) policy.
The document is not classified. David classifies it.
The document’s scope is not defined. David defines it.
The document’s scope is defined, but David would also
like to add his manager.
David reviews and protects the document
Advanced user customization
An organization defines templates for all users.
The user is expected to use them. The user is permitted to alter them slightly.
John composes an email and wants to ‘share protected’
The document is not classified. John classifies it.
John considers to narrow the access for this document
John wants to remove all Contoso employees from the
authorized user list
John wants to remove all Contoso employees from the
authorized user list
John wants to add the company’s legal team due to
compliance requirement
John wants to add the company’s legal team due to
compliance requirement
John wants to reduce the rights for all the recipients to
Reviewer rights, except for the legal team
John wants to reduce the rights for all the recipients to
Reviewer rights, except for the legal team
John wants to reduce the rights for all the recipients to
Reviewer rights, except for the legal team
John wants to reduce the rights for all the recipients to
Reviewer rights, except for the legal team
John is now ready to send the protected document