PU, wow…this year kicks off busy…just with a restart of all Azure VMs…but let’s have a look into this Background Maybe you have heard of the new vulnerability disclosed on January 3rd in several Media. The vulnerability is referred to as “speculative execution side-channel attacks” and affects modern processors from Intel, AMD and ARM. The…
The security of the own data is one of the important things in IT today. So most companies almost have implemented complex group and rights structures to Control data Access.
Some of you may have tried the new Dynamic Access Control what was new with Windows Server 2012.
A good reference for DAC you can find here: Windows Server Blog
Also i want to remember you my article series on File Classification Services.
At this point some of you asked how this should be managed?…how to keep everything managed? what happens if there is an issue?…
Rights Management Services
So lets get on step further. You should ask yourself if it is enough to secure the local data access in your environment. What happens when data gets lost? or is unexpectedly sent to the wrong recipient? Tools like DropBox, OneDrive or just your mail account are easy to use, but also easy to let data get lost.
If this happens, your are happy if you have enabled RMS. Here you can find a good overview of Rights Management: RMS Whitepapers
So with RMS you are not only able to control access to data. You can decide who, when, how long,…. a document can be read, printed, edited, … . This also applies if you sent a mail attachement to the wrong recipient.
Now i am waiting for the first of you askig: Another security layer?…who should manage this?… What can i do if something is going wrong?
Today i will show you the answer for the last question:
This tool enables you to check your configuration and to troubleshoot any Client issue related to AD RMS or Azure RMS. So you can figure out and solve upcoming issues with RMS…
RMS Analyzer Tool
After downloading the tool, you have to decide which environment you are using and which role your user has:
If there are any connection issues at this moment there will be a prereq test first:
Maybe you can see first configuration issues here:
For some missing prerequistes, there are out-of-box fixes enabled:
As soon as all prerequistes are fixed you can start logging your RMS issue:
Ich bin Eric Berg und bin Principal IT-Architekt im Bereich Microsoft Modern Workplace and Datacenter un Microsoft P-TSP für Azure und Modern Desktop. Seit 2015 bin ich Cloud and Datacenter Management MVP. Ich bin Organisator des Azure Thüringen Meetups und Sprecher auf Events wie der ExpertsLive Europe, CDC Germany und Microsoft Ignite. Alle Gedanken, Meinungen und Ideen auf dieser Website sind von mir und spiegeln nicht die Haltung meines Arbeitgebers oder von Microsoft wieder.
5. January 2018
15. September 2017
Wow…it is that time of the year…many announcements are around because of Microsoft Ignite…after 5 months I am finally allowed to talk about project “Honolulu” … NDA is gone now Today Microsoft published a sneak peek of project Honolulu Sneak peek #4: Introducing Project “Honolulu”, our new Windows Server management experience Project Honolulu After it…
16. June 2017
So many time i got asked , why Azure Backup Agent is only able to do a File & Folder Backup… So…my answer was a bit annoying: “Because….it is so!” Windows Server System State Backup Now it is possible to do a System State Backup with Azure Backup Agent on Windows Server 2008 R2 up…
16. June 2017
From August 23rd to 25th the world is traveling to Berlin to meet up at a special Community Event Experts Live Europe is an event from the Community for the Community. Three conference days packed with five parallel tracks and more than 80 sessions are waiting for you: facts so far: more than 20 MVPs…
15. June 2017
If you have a look at the list of native available services, Features and Bundles in Azure, you can find 123 Services (based on June 15th 2017). With this amount of services it is still impossible to keep up with changes and announcements… On top of this you have to figure out the availability in…