Installing RMS on SBS 2008 RRS feed

  • Question

  • We have an SBS 2008 (Exchange 2007) and need to create a mailbox which will receive very confidential emails, that no one else is allowed to see or to have the possibility to see. Several authorised persons need to access this mailbox.

    Normally, we would create a security group with the necessary persons and then give this group full rights to the newly created mailbox. I posted in the Small Business Server forum and I was recommended to employ Active Directory Rights Management Services.

    I've never done this - any tips / links on how best to setup AD RMS on a SBS 2008. Also, when enabled, is this applied for all mailboxes or can we specify which ones?

    Thanks for your advise.

    Friday, August 17, 2012 2:45 PM


  • Hi Oliver,

    here two links to read about the RMS setup.

    AD RMS Prerequisites - http://technet.microsoft.com/en-us/library/dd772659(WS.10).aspx

    AD RMS Step-by-Step Guide - http://technet.microsoft.com/en-us/library/cc753531(v=WS.10).aspx

    I never worked with Exchange 2007, only 2010. I know that SP1 for Exchange 2007 added a transport rule for IRM. RMS and IRM is almost the same, usually RMS is the server side and IRM is the client side. Just in case you see both acronyms somewhere. IRM stands  for Information Rights Management. With the transport rule you can configure that Exchange is adding RMS protection to all incoming emails for a mailbox.

    Each user account how is using RMS needs an RMS CAL. Without 3rd party tools Outlook can read and create RMS protected emails. Outlook from the Office Standard edition can only read emails.

    MS recommends to use a full SQL server for RMS in production. You also need a SSL certificate and a permanent URL.



    Saturday, August 18, 2012 1:39 AM