Q5. Don't I get Mail-Lock functionality in Windows Server 2003 and Office 2003 Information Rights Management (IRM) for free?
A5. No you don't get Mail-Lock™ functionality with Windows Server 2003 and Office 2003 Information Rights Management (IRM). You definitely don't get anything "for free" with Microsoft Windows Server 2003.
You do get some information rights management capabilities with Windows Server 2003 and Office 2003 for the Windows Server 2003 operating environment but it is not easy to use or easy to administer.
Just to stop forwarding of an e-mail in Office 2003 you must
establish "permissions" as to who can view and what their permission level
is. This takes several steps in Windows/Office 2003. It can be so complicated
that Microsoft will offer a Software Developers Kit (SDK). In addition, if
you want to include attachments with your Office 2003 e-mail without Mail-Lock™,
these attachments must be created and saved with the permissions in Office
2003. Content expiration also takes at least 10 steps plus you must identify
specifically who you want to give permissions to. These permissions are a challenge
to maintain, change and remember.
In addition, if you have non-Windows Server 2003 and Office 2003 environments (e.g. Windows 2000 or NT or 2002) the IRM of Windows/Office 2003 doesn't work. To use the IRM features you must have Windows 2003 and Office 2003 and you must change the attributes of those documents.
Even though Microsoft's IRM in Windows 2003 is a good step it can be very complicated to maintain. There are 3 components to address that require the input of your administrator:
Server Component - A component of Windows Server 2003 verifies the identities of machines and users. The server is also responsible for issuing certificates and granting users permission to documents via use licenses.
Windows Client Components - The client piece is a collection of DLLs installed on each client computer that wants to access protected content. The RM client components contain the functionality for all the operations needed for a trusted RM application. They are responsible for obtaining all certificates and licenses for a machine from the WRM server and provide an interface to encrypt and decrypt data.
WRM-aware Client Applications-WRM-trusted client applications are responsible for creating content, granting permissions, and enforcing WRM protection. The IRM in Office 2003 will be one of the flagship applications to implement WRM protection. Users can use our WRM feature to select who is allowed to use, edit, and distribute their content.
Ease of use alone makes Microsoft's IRM a bad answer for end user and management usage compared to Mail-Lock™ functionality.
With Mail-Lock, the policies for your protection are determined by you at the time you send the e-mail and are put on the documents that you send to those recipients but nothing changes on your files. Mail-Lock™ makes life a lot simpler, no administration for the end user and management user. |