Late Friday, Microsoft announced that it will soon release a beta version of digital rights management (DRM) technologies that will let users of Windows Server 2003 and Microsoft Office 2003 create secure documents that cannot be leaked, copied, or forwarded to unauthorized individuals. Microsoft says the technology, dubbed Windows Rights Management Services (WRMS), came about when its enterprise customers asked for a way to prevent sensitive internal documents from being leaked to the Web and competitors. The company will ship a beta version of WRMS in the second quarter, Microsoft says.
"Customers have told us they need better solutions to help safeguard their critical business information," said Mike Nash, the corporate vice president of the Security Business Unit at Microsoft. "What's really compelling about Rights Management technology is that it enables businesses to protect the information they most worry might leak--either deliberately or inadvertently--by putting persistent protections in the documents themselves."
WRMS is a platform that lets developers create applications--including word processors, email clients, and other programs--that can designate two main criteria: Who has access to data and what kind of access they have. WRMS can be used to control the forwarding, copying and printing of documents, and can create time-based expiration rules as well. Microsoft says that an administrator can create WRMS policies such as "company confidential" that prevent such documents from leaving the enterprise.
Last week, Microsoft inadvertently posted Office 2003 Beta 2 to its MSDN Subscriber Downloads site a few weeks ahead of schedule. This Office release includes technology dubbed Information Rights Management (IRM), which requires access to a WRMS-enabled server. IRM lets Office 2003 users protect sensitive information by applying permission rules to documents and emails. In early tests of the technology, I was able to transmit protected email to other testers that then could not be copied to the clipboard, forwarded, or printed. The document protection appears to work outside of Office 2003 environments as well; protected email could not be viewed in other email clients, such as Mozilla, either. I'll have more information about this compelling technology when I post by Office 2003 Beta 2 review in March.
Reader Comments
"I was able to transmit protected email to other testers that then could not be copied to the clipboard, forwarded, or printed."
-> What about the 'print-screen' button on my keyboard? Can I take a screenshot of the email and paste the image in paint?
Editor's note: No. --Paul
ZippyV -February 24, 2003
"In early tests of the technology, I was able to transmit protected email to other testers that then could not be copied to the clipboard, forwarded, or printed. The document protection appears to work outside of Office 2003 environments as well; protected email could not be viewed in other email clients, such as Mozilla, either."
Can anybody say "vendor lock-in"? I don't suppose you checked if you could take screenshots did you?
Editor's note: Yeah, I did. It doesn't work. --Paul
Alex -February 24, 2003
"could not be copied to the clipboard, forwarded, or printed"
-> How about a screenshot with the 'print-screen' button on my keyboard?
Editor's note: Doesn't work. However, someone I talked to recently said that other screen-taking applications, like TechSmith SnagIt, do work. I'll test that. --Paul
ZippyV -February 25, 2003
Nonsense. If somebody can see the document on screen, then he can also write it down, take a photo etc.
Andres -February 26, 2003
Interesting stuff .. it's hard to tell whether this stuff is meant to enslave or enable and liberate. 'Guess I need to read more. Can't take a screenshot now, huh?
Stephen -February 26, 2003
Locks only keep honest people from making mistakes. I can see this as a useful tool to prevent the inadvertent release of information. However if someone wants to circumvent this they will find a way.
Free CDs Offer Fundamental Content for IT Pros Are you up to speed on the latest technologies and solutions? Don't miss out on your chance to get up to speed quickly on fundamental, in-depth information on some of the hottest topics in our library of content.
Let Your Users Reset Their Own Passwords: Free Download Try a 30 day free trial of Desktop Authority Password Self-Service – it provides an easy-to-use, robust system for allowing users to reset their own forgotten passwords or locked accounts.
Get Windows IT Pro & Mark Minasi’s Favorite Power Tools Guide Order Windows IT Pro now and get "More of Mark Minasi's Favorite Power Tools"--a in-depth guide to the most useful Windows commands --FREE with your paid order! Subscribe today, and save 58% off the cover price!
Deep Dive into VMware vSphere, eLearning Series Join John Savill to explore the major functionality capabilities of the vSphere virtualization platform, including identification of the changes from ESX 3.5.