Azure RMS Templates

Question

We are currently using Office 365 and have enabled E3 licenses to use IRM in Office through Azure. We would like to encrypt a lot of documents using the AD RMS Bulk Encyption tool, however it requires an RMS template. Azure provides two (Confidential, and Confidential Read-only). These work using the tool, but when I try to modify the XML to customize the templates it breaks them and since I don't have access to the AD RMS MMC I cannot generate my own. Does anyone know how I can make this work?

Answer 1

Hi,

I am not familiar with this part. Here are some helpful articles and tutorials about this topic:

http://technet.microsoft.com/en-us/library/jj585016.aspx

http://blogs.technet.com/b/rms/archive/2012/04/29/microsoft-s-ad-rms-rights-policy-templates.aspx?wa=wsignin1.0

http://blogs.technet.com/b/rms/archive/2012/07/18/enabling-windows-azure-rights-managment-in-office-365-enterprise-preview.aspx

If still having problem, you can leave comments in above RMS team blog. I suggest you open thread in the Office 365 community directly:

http://community.office365.com/en-us/forums/default.aspx

Thanks,

---

QinDian Tang
MSDN Community Support | Feedback to us
Develop and promote your apps in Windows Store
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Answer 2

The best way to create and manage Azure RM templates is to use PowerShell.

I create one script that generate the template, using something like this:

Add-AadrmTemplate-Names$PolicyName-Descriptions$PolicyDescription-LicenseValidityDuration0-StatusArchived

Then create another script that updates the templates with required settings and the email addresses of the people allowed access to the content:

# Connect to Azure RMS

Connect-AadrmService

"513df317-8fd8-411a-9ac0-58e22ae70aeb"

# Template Specific GUID

$TemplateGUID

="513df417-7fe7-412b-9ad0-54e21ae80aeb"

$User1 = [email address]

$Rights=New-AadrmRightsDefinition-EmailAddress$User1  -Rights view

Set-AadrmTemplateProperty

-TemplateID$TemplateGUID-RightsDefinitions$Rights-LicenseValidityDuration0-StatusPublished

The great part about this method is the ability to run the second PowerShell script again and again to update the list of email addresses, without having to re-package (protect) the content again.

Any questions let me know.