locked
Office 2013 can't access the protected documents after RMS server decommission RRS feed

  • Question

  • I hope RMS experts and Microsoft support can answer this questions since Office 2013 has made some IRM changes.

    After I decommissioned my RMS server, I followed the instructions to set the registry on my Office 2010 client computer, http://technet.microsoft.com/en-us/library/cc747549(v=ws.10).aspx or, http://technet.microsoft.com/en-us/library/cc771071(v=ws.10).aspx. The Office 2010 client computer was able to open the protected documents.

    However, the Office 2013 client computer was no longer able to open those protected documents after the RMS server decommission. Just make it clear that the Office 2013 client computer was able to create and open the protected documents before RMS server decommission.

    I would like to point out that Office 2010 and the previous Office version, their IRM registry and folder path locations refer to DRM such as HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\DRM and C:\users\user_name\AppData\Local\Microsoft\DRM.

    In Office 2013, for its IRM access, we can see the registry uses HKEY_Local_Machine\Software\Microsoft\MSIPC, and the folder path uses C:\Users\user_name\AppData\Local\Microsoft\MSIPC.

    I don't understand why MS made such a change. However, I know that, because of these changes in Office 2013, Office 2013 cannot access Decommission virtual folder and decommissions.asmx file anymore.

    There got be a way to allow Office 2013 client to continue to access the decommissioned RMS server. I just want to know how to make the similar change in the registry to make it work. I tried to put the similar Decommission key under MSIPC reg key. that didn't work.

    Does someone know this trick? Can someone please provide the information of how to allow Office 2013 to open the protected documents after RMS server decommission?

    Thanks in advance,

    Dean


    Dean Chen

    Thursday, February 21, 2013 7:31 PM

Answers

  • Hello Dean.

    AD RMS decommissioning process provides a "interim period" so you can identify all data that needs to get rid of permissions (protection) and will be a "clear text document again" ,so you should not be having issues getting in the unprotected documents.

    If you just decommissioned AD RMS and then right away uninstall AD RMS you will need the AD RMS Server keys (TPD) to recover the key material that was not unprotected. (not sure if you did, you did not mentioned in the previous comment).

    Note that Office 2013 use 15.0 in the reg key path not 14 and also this is Office IRM Reg key not MSIPC one:

    HKCU Software\Microsoft\Office\15.0\Common\DRM

    Regards.

    Cristian

    http://synergyadvisors.biz/

    @SYNERGYSEC

    Monday, March 4, 2013 2:46 PM

All replies

  • Hello Dean.

    AD RMS decommissioning process provides a "interim period" so you can identify all data that needs to get rid of permissions (protection) and will be a "clear text document again" ,so you should not be having issues getting in the unprotected documents.

    If you just decommissioned AD RMS and then right away uninstall AD RMS you will need the AD RMS Server keys (TPD) to recover the key material that was not unprotected. (not sure if you did, you did not mentioned in the previous comment).

    Note that Office 2013 use 15.0 in the reg key path not 14 and also this is Office IRM Reg key not MSIPC one:

    HKCU Software\Microsoft\Office\15.0\Common\DRM

    Regards.

    Cristian

    http://synergyadvisors.biz/

    @SYNERGYSEC

    Monday, March 4, 2013 2:46 PM
  • Hi,

    I am also facing the same issue. I decommissioned the ADRMS server, but did not remove it. All Office 2010 Clients are able to access the files with no issues, but the Office 2013 Clients are being asked for credentials.

    I changed the registry keys for Office 15, but still no luck.

    Please assist.

    Thursday, June 11, 2015 11:13 AM