RMS with FCI

Hi
Few queries about AD RMS , really appreciate if somebody help me on this
When I try to add a file classification [using 2012 R2 FCI] to RMS protected files , it fails ..if I keep the same file as not AD RMS protected , the classification rule work and apply the classification..Could I know why it fails , I already enabled
& added my file server into RMS super users group...
I created a file management task to apply RMS template to classified files and it work perfectly , but again if the file is already applied with a different AD RMS template, then my management task is not changing that template to what I specified in
the task
In TUD environment , how the client in forest1 know about the licensing server in forest2 which issued the license to author who is located in the forest2 ? pls give me some URL/info about AD RMS client discovery in TUD env
Thanks & Regards
Krishna

If it's protected by another RMS server (with exchanged TUD) then Super User isn't going to help. The license will be requested against the other RMS server and that user will not exist there.
Is that the scenario?

Similar Messages

  • AD-RMS with SharePoint Document Access from Internet

    Hi Guys,
    I have a single AD-RMS Server running on 2008 R2 and SQL 2008 R2
    I have sharePoint 2010 Published to Internet.
    I need to integrate AD-RMS with SharePoint instep to provide access for my docuements through SHarepoint internet.
    My Questions:
    Using my single AD-RMS Server with SharePoint Intergration can all AD users access SharePoint from outside to be able to open encrypted documents?
    Is this artical (http://technet.microsoft.com/en-us/library/ee259515(WS.10).aspx) also work on SP 2010? is it the same steps?
    Do I need AD FS in my case?
    Do I need SSO in my case?
    Thanks

    Hi Jean,
    1. to make that working the Internet users need to authenticate against the RMS server as well. So you need to publish this server. Depending on your network policy you can just reverse proxy the RMS server or in a more complex scenario to have another server
    in a DMZ AD to facilitate that. Because you publish the Sharepoint Server to the Internet I assume you do not have a complex scenario.
    I hope you have chosen the URL for the RMS cluster wisely, so that it can be address from the Internet.
    2. I am not a big Sharepoint guy, but it looks familiar.
    3. No, you don't.
    4. No, but would be nice if the users do not have to authenticate twice. Will require a reverse proxy, e.g. TMG (what is discontinued) or similar.
    Hope it helps,
    Lutz

  • RMS and FCI Server 2012 r2

    Trying to use FCI in combination with an RMS template.
    but when i go to create the file management task and try to add the RMS Encrytion action the select template is greyed out and  in the box it says unable to retrieve RMS template.
    Not sure what i am missing since i can't seam to find a guide on how to set up FCI and RMS  on server 2012 R2

    Hi,
    I found following 2 articles which related to use FCI and RMS. Please see：
    Using File Classification Infrastructure (FCI) and AD RMS to automatically protect sensitive information
    http://blogs.technet.com/b/filecab/archive/2010/01/31/using-file-classification-infrastructure-fci-and-ad-rms-to-automatically-protect-sensitive-information.aspx
    Protect everything: using FCI to protect files of any type with Windows Server 2012
    http://blogs.technet.com/b/rms/archive/2012/11/09/protect-everything-using-fci-to-protect-files-of-any-type-with-windows-server-2012.aspx
    And we have a specific forum for ADRMS so you could post your question there for further information: 
    Active Directory Rights Management Service(On premise)
    http://social.technet.microsoft.com/Forums/en-US/home?forum=rms
    If you have any feedback on our support, please send to [email protected]

  • RMS with spooler hanging

    Hi Guys ,
    I have some really frustrated issue. I have 10 cashiers desk with windows 7-64bit that installed with RMS application (point of sale application) also installed with scanner driver/app and printer Epson driver.
    My issue started  when the cashier desk notified on hanging process when they are about to print, this issue happened almost for all the machines win7 we have.
    After my Investigation I found that these machines leak memory, when I figured more deeply what really cause this leak I found the spoolesv cycling nonstop.
    Work around this issue:
    1. I have changed the Epson driver from POS drivers to Microsoft driver
    2.I Download some Hotfix from Microsoft site what was suppose to fix the problem.
    3.I Monitored the processor and this spoolsv for almost a couple of days.
    Now it seems that the memory is not leaking Anymore but still I'm experience the same issue from time to time on different machines.

    Hi,
    If the printer issue is not with all applications, such as Word or Outlook, we need check the application compatibility issue with Windows 7.
    Test in the Clean Boot mode to eliminate the software interruption:
    How to perform a clean boot in Windows
    http://support.microsoft.com/kb/929135/en-us
    As you say, this issue exists in some different computers, so if this problem just exists between Windows 7 and RMS application, we may need a updated version of this application.
    If you have any feedback on our support, please click
    here
    Alex Zhao
    TechNet Community Support

  • Can I measure AC - RMS with my 6040E?

    I have a few current transducers(LEM) in my application.
    (They deliver a AC voltage wich is a mate for the current)
    So, I would like to read the RMS voltage with my 6040E (and a SCB68 connector block).
    My configuration:

    Hi,
    The 6040E is a Data Acquisition board, and not a DMM, and can therefore not deliver data in RMS format, however, you can acquire the analog signal using the 6040E and then calculate the RMS value using one of your RMS Waveform Measurements VI's included with labview. You can find them at: Main Palette-> Analyze-> Waveform Measurements. If your application is not time critical (that is, if you can wait for the data to be acquired and then converted to RMS) this would be the most cost effective solution. If you need a faster response I recommend you check out our line of Digital Multimeters.
    The second issue you must be aware of is the input voltage. I'm aware that a lot of LEM's supply +-10V output, which would be OK, but if you have a LEM that provides a voltage greater than that you'd have to add signal conditioning to divide that voltage down. You can build your own amplifier, depending on the amount of noise you're dealing with, or check out some of our signal conditioning products, that might help improve the acuracy of your measurement.
    I hope all this information was useful. if you need anything else please contact us again.
    Greetings
    Daniel

  • How can I measure RMS with the AI-102?

    Hi folks,
    Can anyone tell me a way to measure RMS voltage with the AI-102?  I need to measure 0-1 VAC.  It seems like there should be a way to collect a sample of voltages and put them in an array to calculate RMS.  Since I'm not approacing the limit of the module's voltage range, there shouldn't be any danger of clipping the signal.
    Has anyone out there attempted this?
    Thanks,
    Eric

    Hi!
      I've never worked with an AI-102, but from the specs I see there's an update rate of 2.8 ms (quite slow...), for a bandwidth of 170 Hz, so the main question is: what frequency band your input signal lies in?  Is it slow varying?
       If your signal's frequency is low enough (I'd suggest below 100 Hz, below 50 is better), you can simpli sample voltage and average samples over time (maybe with some clever techniques...).
       Let me know if this help....
    graziano

  • Azure RMS and FCI Servers

    I am setting up a FCI server and want to encrypt certain documents based on policy.  I have completed the pre-requisites and have reached the stage to install the RMS Connector.  After installing it, I went to authorise a FCI server but I do not
    have that option.  The only options available are Exchange and Sharepoint.
    I have tried the sharepoint option and specified the computer account but when running the GetConenctorConfig script I receive back a 401 Unauthorised error.  Any thoughts as to why the option for a FCI server type is not present?  Seems to be
    a significant oversight.
    Regards
    Pete Hall

    This was a pretty recent addition and I know it took a while for it to show up for everyone.
    Is this still an issue?

  • Office 365 Sharepoint Online with RMS

    I'm looking to setup a new SharePoint Online set in Office 365 and implement RMS. I need to know if RMS with Office 365 and SharePoint will protect PDF's and other types of files or just Office files like word and excel?
    Vincent Sprague

    I'm looking to setup a new SharePoint Online set in Office 365 and implement RMS. I need to know if RMS with Office 365 and SharePoint will protect PDF's and other types of files or just Office files like word and excel?
    Vincent Sprague
    https://support.office.com/en-au/article/Set-up-Information-Rights-Management-IRM-in-SharePoint-admin-center-239ce6eb-4e81-42db-bf86-a01362fed65c?ui=en-US&rs=en-AU&ad=AU
    SharePoint Online supports encryption of the following file types:
    - PDF
    - The 97-2003 file formats for the following Microsoft Office programs: Word, Excel, and PowerPoint
    - The Office Open XML formats for the following Microsoft Office programs: Word, Excel, and PowerPoint
    - The XML Paper Specification (XPS) format
    -=-=-=-
    http://blogs.technet.com/b/rms/archive/2014/08/26/rmsaugust2014update.aspx
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Office 2013 and RMS restrict permission

    Hi,
    I want to restrict Access/modify/view access to documents for some users, and I'm able to do this with Word 2010, but not with Word 2013.
    When I try to restrict access using "restrict Editing" under file information I got the this error:
    "We were not able to find the information Rights Management Template. Please contact your administrator."
    Then I use Rights Protected Folder and things worked fine with me as shown below.
    And my question is how to use RMS with Office 2013 without the plugin?
    Note: Templates are shown in Office 2013 normally and it is updated

    Hi AmirMahouk,
    Protecting Word 2013 file with RMS templates/manuall permissions is performed in very similar way to Word 2010:
    Document cannot be empty (blank)
    Go to File > Info > Protect Document > Restrict Access > Restricted Access.
    Select "restrict permission to this document"
    Provide emails of the users you want to protect documet for in Read or in Change fields. You can choose additional options clicking "More Options" button.
    Did my post help you or make you laugh? Don't forget to click the Helpful vote :) If I answered your question please mark my post as an Answer.

  • Sharepoint with AD FS ArgumentNullException

    Good day!
    We have three servers on Windows Server 2012R2 installed ADFS, WAP and Sharepoint 2013. On WAP published several sites Sharepoint 2013 with through preauthentication. They can be seen from the outside, it is possible for them to go. But there were one problems:
    We can not configure SAML-based claims authentication with AD FS in SharePoint 2013. Configure authentication for a claims-based saml on this documentation https://technet.microsoft.com/en-us/library/hh305235.aspx?f=255&MSPPError=-2147217396, in the end
    there is the following exception
    Server Error in '/' Application.
    Value can not be null.
    Description: An unhandled exception occurred during the execution of the current web request. Examine the stack trace for more information about the error and call it code snippet.
    Exception Details: System.ArgumentNullException: Value can not be null.
    Source Error:
    An unhandled exception occurred during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace.
    Stack Trace:
    [ArgumentNullException: Значение не может быть неопределенным.]
    Microsoft.SharePoint.Utilities.SPUtility.FormatAccountName(String provider, String user) +196
    Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous) +3655
    Microsoft.SharePoint.SPWeb.InitializeSPRequest() +307
    Microsoft.SharePoint.SPWeb.EnsureSPRequest() +394
    Microsoft.SharePoint.WebControls.SPControl.EnsureSPWebRequest(SPWeb web) +324
    Microsoft.SharePoint.WebControls.SPControl.SPWebEnsureSPControl(HttpContext context) +610
    Microsoft.SharePoint.Utilities.SPUtility.RedirectValidateInternal(String url, SPWeb web, HttpContext context, Boolean isTrusted) +320
    Microsoft.SharePoint.Utilities.SPUtility.DetermineRedirectUrl(String urlProposed, SPRedirectFlags flags, HttpContext context, SPWeb overrideWeb, String queryString, String& urlRedirect) +828
    Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext context, String queryString) +101
    Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnSignedIn(EventArgs eventArgs) +663
    Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request) +809
    Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args) +522
    Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs eventArgs) +204
    System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +176
    System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +169
    Event code: 3005
    Event code: 3005
    Event message: Возникло
    необработанное исключение.
    Event time: 27.04.2015 16:59:49
    Event time (UTC): 27.04.2015 11:59:49
    Event ID: 3cf0a03de8894665b1127d32672f5e8a
    Event sequence: 14
    Event occurrence: 4
    Event detail code: 0
    Application information:
        Application domain: /LM/W3SVC/973714976/ROOT-2-130746090512281500
        Trust level: Full
        Application Virtual Path: /
        Application Path: C:\inetpub\wwwroot\wss\VirtualDirectories\domen.local443\
        Machine name: SERVER
    Process information:
        Process ID: 20236
        Process name: w3wp.exe
        Account name: domenАдминистратор
    Exception information:
        Exception type: ArgumentNullException
        Exception message: Значение не может быть неопределенным.
       в Microsoft.SharePoint.Utilities.SPUtility.FormatAccountName(String provider, String user)
       в Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean
    bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)
       в Microsoft.SharePoint.SPWeb.InitializeSPRequest()
       в Microsoft.SharePoint.SPWeb.EnsureSPRequest()
       в Microsoft.SharePoint.WebControls.SPControl.EnsureSPWebRequest(SPWeb web)
       в Microsoft.SharePoint.WebControls.SPControl.SPWebEnsureSPControl(HttpContext context)
       в Microsoft.SharePoint.Utilities.SPUtility.RedirectValidateInternal(String url, SPWeb web,
    HttpContext context, Boolean isTrusted)
       в Microsoft.SharePoint.Utilities.SPUtility.DetermineRedirectUrl(String urlProposed, SPRedirectFlags
    flags, HttpContext context, SPWeb overrideWeb, String queryString, String& urlRedirect)
       в Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext
    context, String queryString)
       в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnSignedIn(EventArgs
    eventArgs)
       в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest
    request)
       в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object
    sender, EventArgs args)
       в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnAuthenticateRequest(Object
    sender, EventArgs eventArgs)
       в System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
       в System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
    Request information:
        Request URL: https://domen.local:443/_trust/
        Request path: /_trust/
        User host address: fe80::c0a7:b73a:afea:3972C:\inetpub\wwwroot\wss\VirtualDirectories\domen.local443\
        User: 
        Is authenticated: True
        Authentication Type: Federation
        Thread account name:DOMEN\Администратор
    Thread information:
        Thread ID: 20
        Thread account name: DOMEN\Администратор
        Is impersonating: False
        Stack trace:    в Microsoft.SharePoint.Utilities.SPUtility.FormatAccountName(String
    provider, String user)
       в Microsoft.SharePoint.SPGlobal.CreateSPRequestAndSetIdentity(SPSite site, String name, Boolean
    bNotGlobalAdminCode, String strUrl, Boolean bNotAddToContext, Byte[] UserToken, SPAppPrincipalToken appPrincipalToken, String userName, Boolean bIgnoreTokenTimeout, Boolean bAsAnonymous)
       в Microsoft.SharePoint.SPWeb.InitializeSPRequest()
       в Microsoft.SharePoint.SPWeb.EnsureSPRequest()
       в Microsoft.SharePoint.WebControls.SPControl.EnsureSPWebRequest(SPWeb web)
       в Microsoft.SharePoint.WebControls.SPControl.SPWebEnsureSPControl(HttpContext context)
       в Microsoft.SharePoint.Utilities.SPUtility.RedirectValidateInternal(String url, SPWeb web,
    HttpContext context, Boolean isTrusted)
       в Microsoft.SharePoint.Utilities.SPUtility.DetermineRedirectUrl(String urlProposed, SPRedirectFlags
    flags, HttpContext context, SPWeb overrideWeb, String queryString, String& urlRedirect)
       в Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext
    context, String queryString)
       в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnSignedIn(EventArgs
    eventArgs)
       в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest
    request)
       в Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object
    sender, EventArgs args)
       в Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnAuthenticateRequest(Object
    sender, EventArgs eventArgs)
       в System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
       в System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
    Custom event details:
    Below is the log from the server Sharepoint
    login attempts after him through AD FS
    [Forced due to logging gap, cached @ 04/23/2015 14:15:33.24,
    Original Level: Verbose] SQL connection time: 0.0931 for Data Source=sharepoint2013;Initial 
    Catalog=SharePoint_Config1;Integrated Security=True;Enlist=False;Pooling=True;Min
    Pool Size=0;Max Pool Size=100;Connect Timeout=15;Application 
    Name=SharePoint[w3wp][4][SharePoint_Config1]
    c67bff9c-d04d-7016-86c3-95382b2ada70
    04/23/2015 14:15:33.30 
    w3wp.exe (0x32CC)          
                0x3E3C
    SharePoint Foundation         
    Topology            
    umbj
     High 
     [Forced due to logging gap, Original Level:
    Verbose] Deserializing the type named {0} and with id {1}.
    c67bff9c-d04d-7016-86c3-95382b2ada70
    04/23/2015 14:15:33.35 
    w3wp.exe (0x32CC)          
                0x3E3C
    SharePoint Foundation         
    Claims Authentication         
    f2us
    Verbose Claims
    Saml Sign-In: Redirecting to 'https://adfs.domain.ru/adfs/ls?wa=wsignin1.0&wtrealm=urn%3asharepoint%3aportal.domain.ru&wctx=https%3a
    %2f%2fportal.domain.ru%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F'
    to authenticate for request 'https://portal.domain.ru/_trust/default.aspx?
    trust=ADFS30&ReturnUrl=/_layouts/15/Authenticate.aspx?Source=%252F&Source=/'.
    c67bff9c-d04d-7016-86c3-95382b2ada70
    04/23/2015 14:15:33.35 
    w3wp.exe (0x32CC)          
                0x3E3C
    SharePoint Foundation         
    Micro Trace            
          uls4
    Medium  
     Micro Trace Tags: 0 nasq,1 agb9s
    c67bff9c-d04d-7016-86c3-95382b2ada70
    04/23/2015 14:15:33.35 
    w3wp.exe (0x32CC)          
                0x3E3C
    SharePoint Foundation         
    Monitoring            
    b4ly

    I know this is an old thread and the question was specifically for Windows Server 2008 R2, but I wanted to let folks know that we've published a new set of step-by-step instructions for AD RMS with AD FS on Windows Server 2012 R2.
    We also ran into a lot of problems when trying to get this working and one of the things that we specifically included in this new document, was checkpoint verification tests - both "just in time" and repeated in a summary section with tips
    for what to check if the tests fail.  Hopefully, with these checkpoints, you can narrow down the problem or at least eliminate what isn't a problem. And when we ran into odd, quirky things ourselves (such as case-sensitivity for some values, or the importance
    of a trailing "/"), we included these in the document as well. If you have any other tips, consider adding them as a Community Addition at the bottom of the page to help other people.
    Deploying Active Directory Rights Management Services with Active Directory Federation Services

  • Emulating HTTP POST for file upload with J2ME

    I have search through a lot of site and couldn't find the actual code. I try to emulate below html with J2ME.
    <form method="POST" enctype="multipart/form-data" action="Insert.asp">
    <td>File :</td><td>
    <input type="file" name="file" size="40"></td></tr>
    <td> </td><td>
    <input type="submit" value="Submit"></td></tr>
    </form>
    here is my code :
    HttpConnection c = null;
    InputStream is = null;
    OutputStream os = null;
    byte[] filecontent = file byte content ...
    try {
    c = (HttpConnection)Connector.open("http://xx.com/insert.asp");
    c.setRequestMethod(HttpConnection.POST);
    c.setRequestProperty("Content-Length", String.valueOf(cmg.length + 15));
    c.setRequestProperty("Content-type","multipart/form-data");
    os = c.openOutputStream();
    os.write("file=c:\\abc.png".getBytes());
    os.write(filecontent);
    os.flush();
    I can emulate form with text field and it work, but when it come to file upload, above code not working, I don't know what to put for the outputstream, filename ? content ? or both ? since the html only has one field that is the "file" field. The file is actually store in rms with filename abc.png, and I just put in the c:\ for the server as a dump path.

    File upload is more complicated then that... you need multi-part MIME formatting.... But I have just the code...
    http://forum.java.sun.com/thread.jspa?forumID=256&threadID=451245

  • AD RMS for multi tenant domain environment

    Hi,
    I have successfully configure the AD RMS with lots of work around. now i want to use multi tenant domain environment. i have multiple domains running on my production env. Now can anyone help me out to configure the RMS Server to add multiple URLs for licensing
    and certifications in AD RMS Server on windows Server 2012. i need a proper step by step configuration roles to activate on immediate basis. 
    Any help in this regards will be highly appreciated,
    Attahcments screent shots might help you what i want ;)
    Regards,
    Imran Bashir
    MCSA 2008, MCITP, MCTS, MCP
    JNCIA ER,EX
    Brocade Certified
    Imran Bashir Network Administrator MCP, JNCIA-EX,ER,JNIOUS +92-333-4330176

    Hi,
    in a single forest you can have only one RMS SCP. You could create more RMS clusters but those are not discover-able that way, only over using RMS templates or overwriting the clients registry.
    If you say multi-tenant I assume every tenant should have its own RMS key, correct? If you have only one RMS cluster the cluster admin will have control over all documents.
    Hope that helps,
    Lutz

  • AD RMS, the black hole in Microsoft Licensing

    Hello,
    I have read the Product Use Rights from A to Z, I have searched the web everywhere, I have asked the Microsoft Partner Support and some local Microsoftees and I cannot find a single rule about AD RMS Licensing!
    All I found is that AD RMS is an additive CAL to Windows Server. That means it is an additionnal product and does'nt have to be company-wide. Which means we need some rules to decide whether a user/device needs a CAL or not. But there isn't any!
    Well to be honest, there is one rule, applying to Windows Server Essentials, a product I have never seen in production with AD RMS personnally...
    Even if we assume it is a mistake and that "Windows Server Essentials" rule applies to Windows Server Standard and Datacenter, the licensing headache goes further ahead with AD RMS-aware applications. Like Microsoft Office or Microsoft Exchange.
    Licensing AD RMS with Office is somewhat covered by some TechNet articles, where we can guess that only the users/devices creating protected documents need Office Pro Plus licenses when readers/reviewers can use Office Standard or Office Web Apps. Still,
    nothing is said about the undelying AD RMS CALs. Who needs some? Users creating, probably. But what about the others?
    Licensing AD RMS with Exchange is much less documented, as I can only find a table saying some IPM features require the Exchange Enterprise CAL. But who needs the Enterprise CAL? The users creating the protected messages in Outlook? The
    users creating the tranport rules in Exchange? All the users reading the protected messages? And again, nothing is said about the underlying AD RMS CALs.
    Any help on those licensing topics would be much appreciated.
    Thank you.
    Gilles Messinger
    SAM Consultant

    Hi Gilles,
    I am sorry but it's not 100% clear what the center of your concerns entirely or what you are trying to do here. That said, I will try to answer you as best I can.
    The licensing requirements for the ability to protect and consume content using AD RMS in AD RMS-aware applications under Windows operating systems is described here in the following topic on
    AD RMS Client Requirements  http://technet.microsoft.com/en-us/library/dd772753(v=WS.10).aspx:
    The Active Directory Rights Management Services (AD RMS) client is included with the Windows Vista®, Windows® 7, Windows Server® 2008, and Windows Server® 2008 R2 operating systems. If you are using Windows XP, Windows 2000, or Windows Server 2003
    as your client operating system, a compatible version of the AD RMS client is available for download from the Microsoft Download Center Web site.
    The AD RMS client can be used with the AD RMS server role included in Windows Server 2008 and Windows Server 2008 R2 or with previous versions of RMS running on Windows Server 2003.
    I should also mention that the AD RMS Client is also included and supported for Windows 8 and the AD RMS server role is also available in Windows Server 2012 as well.
    To licensing and ability to protect and consume content using IRM features (which are typically enabled using an AD RMS deployment but can also use Windows Azure AD Rights Management) in other products such as Microsoft Office or Microsoft Exchange does
    require specific versions of those products. For more information, the following links may be helpful:
    Support for IRM in Office
    http://technet.microsoft.com/en-us/library/dd772650(v=WS.10).aspx
    AD RMS and Microsoft Office Deployment Considerations
    http://technet.microsoft.com/en-us/library/dd772697(WS.10).aspx
    There is not an additional need to specifically license AD RMS for use in supporting IRM in Exchange. The specific requirements for deployment in Exchange are covered in the Exchange documentation:
    http://technet.microsoft.com/en-us/library/dd638140.aspx#reqs
    Also, this roadmap for implementing IRM features in Exchange may also be helpful to you:
    http://social.technet.microsoft.com/wiki/contents/articles/1902.roadmap-for-implementing-irm-features-in-microsoft-exchange.aspx
    Hope that helps,
    Brad Mahugh
    Microsoft Corporation
    This post is provided "AS IS" and confers no promises of current or future technical support for a specific support issue. Please use Microsoft product support if you need a service commitment for your current support case or issue.

  • Azure RMS

    Dear Sir,
    I got an experienced for the RMS with iPhone.  I have enrolled an account for RMS evaluation from aadrm portal.  I have registered two acounts for testing purpose.  First of all, I have download the apps from apple store and install
    it on my iphone.  After installation, I have tried to encrypted the photos through existing photo library.  I follwed the instructions to do so.  I have two choices and the third choices is dim which is "Custom Permission". The only
    two choices "Shared" and "Protected".  I am able to encrypt the photo and sent out to the designated users.  It returns an error on sharing permission.  What is going wrong?  On the other hand, is the in placed photo
    will be encrpted or not?  I have returned to photo library the format remains unchanged. 
    Secondly, I have registered Widnows Azure.   As heard from tecnical engineer-MS, they told me that MS has an Azure RMS dedicated cloud platform.  Is it a centralised platform for user management?  I would like managed all user in Azure
    cloud services.  Please let me know?
    For the permission assigned, I also have an experience before with PC encrypted document file(s) where I used ms office 2013. 
    Finally, I woul like to get more Windows Azure information.  Can you give me some implementation note and technical requirements?
    Regards
    Stanley                                              

    Hi Stanely,
    Some answers for your questions:
    " I have two choices and the third choices is dim which is "Custom Permission""
    >>> "Custom Permissions" is currently not supported and but will be available soon. It allows you to give permissions to specific people (i.e. email addresses) inside or outside your organization (i.e. account).
    >>> "It returns an error on sharing permission."
    It is not clear to me what happened here, can you please elaborate? Did the designated user get the sharing permissions when he tried to open the document using RMS sharing app? did it happen on the same device?
     >>> "On the other hand, is the
    in placed photo will be encrpted or not?  I have returned to photo library the format remains unchanged. 
    When you choose a photo from your Photos gallery, the photo is copied and encrypted using RMS and can be sent in a protected file format (called PFILE).
    The original photo in your Photos library app remains unchanged, because it is currently impossible to use RMS to protect the photos that are in your photos library app. You can of course choose to delete the original photo itself after you protect and share
    it.
    About the rest of your questions,
    - Windows Azure provides deep documentation and tutorials which you can find here: http://www.windowsazure.com/en-us/
    You can use Windows Azure Active Directory to manage all the users in your organization, as explained there.
    Azure RMS is the new RMS technology which RMS sharing app uses. You can build your own applications that uses Azure RMS too. Please refer to the following links to find more information on Azure RMS:
    http://blogs.msdn.com/b/rms/archive/2013/11/15/the-new-microsoft-rms-has-shipped.aspx
    You might also want to read Azure RMS whitepaper here:
    http://blogs.technet.com/b/rms/archive/2013/07/31/the-new-microsoft-rights-management-services-whitepaper.aspx
    Best regards,
    Yair

  • J2ME - RMS - Record Enumeration - compilation problem

    Hi,
    Im trying to create RMS with Record Enumeration. Able to open a recordstore & write a record in it; while reading the record with record enumeration, im assigning the recordstore object to enumeration. Here compilation problem occurs. Im attaching the code which im working. Please help me to solve this issue.
    import javax.microedition.midlet.*;
    import javax.microedition.rms.*;
    import javax.microedition.lcdui.*;
    import java.io.*;
    public class RecordEnumeration extends MIDlet implements CommandListener
         private Display display;
         private Alert alert;
         private Form form;
         private Command cmdOpen, cmdWrite, cmdRead, cmdClose, cmdDelete, cmdExit;
         private RecordStore rs = null;
         private RecordEnumeration re = null;
         public RecordEnumeration()
              display = Display.getDisplay(this);
              cmdOpen = new Command("Open", Command.SCREEN, 1);
              cmdWrite = new Command("Write", Command.SCREEN, 1);
              cmdRead = new Command("Read", Command.SCREEN, 1);
              cmdClose = new Command("Close", Command.SCREEN, 1);
              cmdDelete = new Command("Delete", Command.SCREEN, 1);
              cmdExit = new Command("Exit", Command.SCREEN, 1);
              form = new Form("RecordEnumeration");
              form.addCommand(cmdOpen);
              form.addCommand(cmdWrite);
              form.addCommand(cmdRead);
              form.addCommand(cmdClose);
              form.addCommand(cmdDelete);
              form.addCommand(cmdExit);
              form.setCommandListener(this);
         public void startApp()
              display.setCurrent(form);
         public void pauseApp()
         public void destroyApp(boolean unconditional)
         public void commandAction(Command cmd, Displayable displayable)
              if(cmd == cmdExit)
                   destroyApp(true);
                   notifyDestroyed();
              else if(cmd == cmdOpen)
                   try
                        rs = RecordStore.openRecordStore("RecordEnumeration", true);
                        System.out.println("Opening Record");
                   catch(Exception err)
                        alert = new Alert("Err Opening", err.toString(), null, AlertType.WARNING);
                        alert.setTimeout(Alert.FOREVER);
                        display.setCurrent(alert);
              else if(cmd == cmdWrite)
                   try
                        String StringOutput[] = {"First Record", "Second Record", "Third Record"};
                        for (int x = 0; x < 3; x++)
                             byte[] byteOutputData = StringOutput[x].getBytes();
                             rs.addRecord(byteOutputData, 0, byteOutputData.length);
                             System.out.println("Record "+ x +" Added");
                   catch (Exception err)
                        alert = new Alert("Err Writing", err.toString(), null, AlertType.WARNING);
                        alert.setTimeout(Alert.FOREVER);
                        display.setCurrent(alert);
              else if(cmd == cmdRead)
                   try
                        StringBuffer buffer = new StringBuffer();
                        re = rs.enumerateRecords (null, null, false);
                        while (re.hasNextElement())
                             buffer.append(new String(re.nextRecord()));
                             buffer.append("\n");
                        alert = new Alert("Enumeration", buffer.toString(), null, AlertType.WARNING);
                        alert.setTimeout(Alert.FOREVER);
                        display.setCurrent(alert);
                        System.out.println("Reading");
                   catch(Exception err)
                        alert = new Alert("Err Reading", err.toString(), null, AlertType.WARNING);
                        alert.setTimeout(Alert.FOREVER);
                        display.setCurrent(alert);
              else if(cmd == cmdClose)
                   try
                        rs.closeRecordStore();
                        System.out.println("Closed");
                   catch(Exception err)
                        alert = new Alert("Err Closing", err.toString(), null, AlertType.WARNING);
                        alert.setTimeout(Alert.FOREVER);
                        display.setCurrent(alert);
              else if(cmd == cmdDelete)
                   try
                        RecordStore.deleteRecordStore("RecordEnumeration");
                        re.destroy();
                        System.out.println("Deleted");
                   catch(Exception err)
                        alert = new Alert("Err Deleting", err.toString(), null, AlertType.WARNING);
                        alert.setTimeout(Alert.FOREVER);
                        display.setCurrent(alert);
    These are the error which im getting while compiling in WTK.
    C:\WTK2.5.1\apps\WritingMixedData\src\RecordEnumeration.java:60: incompatible types
    found : javax.microedition.rms.RecordEnumeration
    required: RecordEnumeration
                        RecordEnumeration re = rs.enumerateRecords(null,null,false);
                        ^
    C:\WTK2.5.1\apps\WritingMixedData\src\RecordEnumeration.java:99: cannot find symbol
    symbol : method hasNextElement()
    location: class RecordEnumeration
                        while (re.hasNextElement())
                        ^
    C:\WTK2.5.1\apps\WritingMixedData\src\RecordEnumeration.java:101: cannot find symbol
    symbol : method nextRecord()
    location: class RecordEnumeration
                             buffer.append(new String(re.nextRecord()));
                             ^
    C:\WTK2.5.1\apps\WritingMixedData\src\RecordEnumeration.java:136: cannot find symbol
    symbol : method destroy()
    location: class RecordEnumeration
                        re.destroy();
                        ^
    4 errors
    Advices are welcome. Thanks in advance.
    -Singu

    Hi Guys,
    J2ME TECHNOLOGIES
    I created a record store and inserted record date "random" into it using the following code.
    RecordStore rs = null;
    try {
    rs = RecordStore.openRecordStore( "myrs",true);
    //rs = RecordStore.openRecordStore( "myrs",false );
    rs.setMode(1,true);
    ByteArrayOutputStream baos = new ByteArrayOutputStream();
    DataOutputStream dos = new DataOutputStream(baos);
    try{dos.writeUTF("random");}catch(Exception e){}
    byte[] b = baos.toByteArray();
    rs.addRecord(b, 0, b.length);
    }catch(Exception e){}
    I executed this MIDLET TO INSERT.
    I closed the application and tried to look for the physical db file inside my application folder where i couldnt find it.
    Then i tried to read the data from RECORD STORE myrs using the the same MIDlet by editing the aboe code as follows
    RecordStore rs = null;
    try {
    rs = RecordStore.openRecordStore( "myrs",false);
    byte[] recData = new byte[10];
    ByteArrayInputStream bais = new ByteArrayInputStream(recData);
    DataInputStream dis = new
    DataInputStream(bais);
    rs.getRecord(1, recData, 0);
    try{System.out.println("UTF: " + dis.readUTF());}catch(Exception e){}
    System.out.println("--------------------");
    } catch( RecordStoreException e ){// couldn't open it or create it
    System.out.println("data base creation error"+e);
    But when i executed it the error occured
    microedition.rms.RecordStoreNotFoundException: cannot find record store file
    My question in my first code ive created the data store and inserted the values into my recordstore myrs
    Then when i edit the code for creation into reading from the record store why the error occurs.Does the Midlet store the record store Temporarirly ONLY till the MIDLET LIFECYCLE.
    IF SO what is the method and code to store the RECORD STORE PERMANENTLLY EVEN AFTER THE MIDLET EXECUTION QUITS.
    ///////////////////////kARTHEE

Maybe you are looking for