Sign in
 
HomeSecurity BulletinsToolsLearnLibrarySupport
Security TechCenter >
> 
> 
How to remove permission on document applied by RMS

คำตอบ How to remove permission on document applied by RMS

  • Tuesday, May 01, 2012 4:56 AM
     
     
    Sign In to Vote
    0

    Hi All,

    We have hundreds of documents protected using RMS. So is there any way to remove all the permission applied to these documents once?

    Dilshan


     

All Replies

  • Tuesday, May 01, 2012 7:12 AM
     
     Answered
    Sign In to Vote
    0

    Hi Dilshan,

    You can either use the ad rms decommissioning process, that is if you disabling and removing the RMS servers.

    Or if you want to unprotect a few documents then you will have to use a script based action with the Bulk protection tool.

    http://technet.microsoft.com/en-us/library/cc754967(v=ws.10).aspx

    http://www.microsoft.com/en-us/download/details.aspx?id=11122

    Blog: http://OutOfScope.info | @ Twitter: @darthsydd | ADRMS Wiki Portal: Technet Wiki

     
  • Tuesday, May 01, 2012 7:25 AM
     
     
    Sign In to Vote
    0

    Hi Adnan,

    Few days back i have migrated my clients 2 Windows RMS servers to ADRMS server. As per now both new and old documents can be open. Currently 300+ users are using the ADRMS out of 1500+. I need to unprotected documents which has done by those users. How can achieve using the above tool. Please guide me...

    Appreciate your quick response.

    Dilshan  


     
  • Tuesday, May 01, 2012 7:44 AM
     
     
    Sign In to Vote
    0

    Where are those documents stored, file server, shares or on local drive on workstation?

    I think you will have to use the bulk protection tool and run it via a script

    RMSBulk.exe /decrypt \\ServerName\ShareName

    Blog: http://OutOfScope.info | @ Twitter: @darthsydd | ADRMS Wiki Portal: Technet Wiki

     
  • Tuesday, May 01, 2012 7:52 AM
     
     
    Sign In to Vote
    0
    This tool seems fine for my requirement but the thing is since my client environment did not have a proper RMS structure earlier administrators allowed users to store their files on users local hard drive. The issue is some users have mixed RMS protected files with their regular files and could not find RMS protected file locations exactly. In this kind of situation how can i find RMS protected files and create the script.      
     
  • Tuesday, May 01, 2012 8:09 AM
     
     
    Sign In to Vote
    0

    Thats a difficult scenario :(

    But the nice thing is the tool can process all files and unprotect the protected ones at the same time. The only issue being that it can only be given \\ sharename paths only.

    So you could try running it with

    RMSBulk.exe /decrypt \\computername\C$\documents

    See if it works.

    Or you can have the users just copy the files to a temp share where this tool can be running on a 5 min interval batch job.

    Blog: http://OutOfScope.info | @ Twitter: @darthsydd | ADRMS Wiki Portal: Technet Wiki

     
  • Tuesday, May 01, 2012 8:28 AM
     
     
    Sign In to Vote
    0
    As you said it is not practical when documents are not in a separate place. Anyway i try to figure out something since this is the only way. Is there anyway we can generate a report statistics with ADRMS protected document name and who has done the encryption process.
     
  • Tuesday, May 01, 2012 11:14 AM
     
     Answered
    Sign In to Vote
    0

    There is all the information stored inside the Logging DB. It's a challenge but you could extract the data you want if you're good with  SQL queries

    http://technet.microsoft.com/en-us/library/dd772686(v=ws.10).aspx

    Blog: http://OutOfScope.info | @ Twitter: @darthsydd | ADRMS Wiki Portal: Technet Wiki