Mastering Active Directory - Second Edition

How does Azure RMS work?

So far, we have talked about AIP and Azure RMS's capabilities. But how do they work? What is the technology behind them? In this section, we are going to look into this in detail.

At a high level, I can explain the Azure RMS document protection process as follows:

• When a user protects a document, Azure RMS encrypts the content of the file and attaches an access policy to it. This policy decides what other users can do with the protected data.
• When other users access the file (after successful Azure AD authentication), Azure RMS decrypts the file and applies an access policy to it.

At a high level, it sounds simple, but let's go through this process in detail so we can learn about the technology behind it.

The best ...