How to Deploy AD RMS Policy Templates

How to Deploy AD RMS Policy Templates


 

Method 1 - Using Group Policy with Office Administrative Templates

  1. Note the location of the network share where the ADRMS Rights Policy Templates (xml files) are being stored. Double check the domain users have at least read permission on the share.
  2. Download the Office 2010/2007 Administrative Template files (links below)
  3. Login to the Domain controller and launch the GPMC
  4. Create a new Group Policy Object. Then traverse thru User Configuration then Administrative Templates. Load the Office 2010 template (Office14.adm) / Office 2007 template (Office12.adm) / Office 2003 template (Office11.adm)
  5. Go to setting User Configuration\Administrative Templates\Microsoft Office 2010\Manage Restricted Permissions
  6. Select Specify Permission Policy Path, click Enabled and provide the share name to the location of the ADRMS Rights Policy Templates
  7. Apply the GPO to the requisite OU where the user objects reside

 Reference Links:

Download Links:

 

Method 2 - Automatic AD RMS Rights Policy Template Distribution

Documented in the AD RMS Rights Policy Templates Deployment Step-by-Step Guide

Essentially involves the following elements

  • Network share where the ADRMS Rights Policy Templates can be stored
  • Desktop clients that are Windows Vista SP2 and above
  • Creating a Scheduled task
  • Few registry edits

Method 3 - Manually copy the ADRMS Rights Policy Templates

  1. Modify the registry key to set the location of the templates folder
  2. Copy the ADRMS Rights Policy Templates from the network share to the designated folder on the local computer e.g. %LocalAppData%\Microsoft\DRM\Templates

Documented in the AD RMS Rights Policy Templates Deployment Step-by-Step Guide

Method 4 - Offline Folders

A combination of the above three methods, involving the steps

  1. Modify the registry key to set the location of the templates folder on the local computer
    HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\DRM
    Create a new Expandable String Value named AdminTemplatePath
    for the AdminTemplatePath Value enter the network share path to the ADRMS Rights Policy Templates
  2. Enable offline folder sharing for the network share path
  3. Additionally configure it to sync at login to replicate any changes on the ADRMS Rights Policy Templates network share

Reference Links:

AD RMS Policy Template Considerations

Leave a Comment
  • Please add 3 and 2 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Carsten Siemens edited Revision 5. Comment: Added tags: en-US, has comment, has TOC

  • Steve Light - MSFT edited Revision 4. Comment: Added reference link to: RMS templates managed by group policy (AdminTemplatePath)

  • Ed Price - MSFT edited Revision 3. Comment: Title casing. Great article!

Page 1 of 1 (3 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Ed Price - MSFT edited Revision 3. Comment: Title casing. Great article!

  • Steve Light - MSFT edited Revision 4. Comment: Added reference link to: RMS templates managed by group policy (AdminTemplatePath)

  • Thanks for your description.

  • Carsten Siemens edited Revision 5. Comment: Added tags: en-US, has comment, has TOC

Page 1 of 1 (4 items)