Azure RMS + Office365 = Eternal Security of the Worriless Mind Saša Kranjac MCT, CEI Security, Azure, Windows Internals

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What solutions do we have? 11/3/2017 5:55 PM What solutions do we have? One possible solution would be: Other solution that comes to mind is: © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What is Azure RMS? Cloud-based Information Rights Management solution 11/3/2017 5:55 PM What is Azure RMS? Cloud-based Information Rights Management solution Continuous Data Protection outside Organizational boundaries Across multiple devices – PCs, phones, tablets © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows, Windows Phone, Mac OS, iOS, Android 11/3/2017 5:55 PM Presence OFFICE 365 Windows, Windows Phone, Mac OS, iOS, Android FCI EXCHANGE SHAREPOINT AD © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM What is Azure RMS? Cloud-based Information Rights Management (IRM) solution Continuous Data Protection outside Organizational boundaries Across multiple devices – PCs, phones, tablets © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM Why Azure RMS? I want to apply protection instantly, to the data I choose to I want to be sure my sensitive data is not printed, forwarded or used after specific dates I have control over data security and policies © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Azure RMS can: Protect any file, on any device 11/3/2017 5:55 PM Azure RMS can: Protect any file, on any device Protection stays with the file Share to anyone Secure locally, control through Cloud Protect easily and fast © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM Azure RMS can: Audit and Monitor usage (who, success/fail access, time) Use with Exchange, Sharepoint, FCI Apply custom policies App support – RM SDK © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM Azure RMS can: Prevent copying, pasting, modifying, printing, faxing content Prevent unauthorized access to e-mail Restrict access to content to a specified period of time © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IRM cannot prevent: Manual copying or retyping 11/3/2017 5:55 PM IRM cannot prevent: Manual copying or retyping Photographing content on a screen Third-party screen-capture copying Malicious programs capture or copying © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Data sync with Azure RMS 11/3/2017 5:55 PM Data sync with Azure RMS Cn (Common Name) jsmith displayName John Smith Mail john.smith@contoso.com proxyAddresses SMTP:john.smith@contoso.com userPrincipalName accountEnabled True objectSID (sync ID) 02 05 00 03 12 15 AB A1 … C2 B1 00 00 11 10 pwdLastSet 20160203122225.00 sourceAnchor (for licensing) F5SRjefwQzy25s+r#4QGqW usageLocation (for licensing) UK © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Cloud Subscription Azure AD Client Devices Applications 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enterprise Mobility Suite 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Office 365 Azure RMS Standalone Enterprise Mobility Suite RMS for Individuals © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enterprise Mobility Suite 11/3/2017 5:55 PM Office 365 Enterprise E3, E4 Office 365 Education A3, A4 Office 365 Government G3, G4  Office 365 Small Business Office 365 Small Business Premium Office 365 Midsize Business Office 365 Enterprise E2, A2, K1 SharePoint Plan 2 Exchange Online Plan 2  Cloud Subscription Azure AD Client Devices Applications Office 365 Azure RMS Standalone Enterprise Mobility Suite RMS for Individuals © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enterprise Mobility Suite 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Office 365 Azure RMS Standalone Enterprise Mobility Suite RMS for Individuals Office 365 Enterprise E2, E3, E4, K1 Office 365 Education A2, A3, A4 Office 365 Government G3, G4 SharePoint Plan 2 Exchange Online Plan 2  Office 365 Small Business Office 365 Small Business Premium Office 365 Midsize Business  © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enterprise Mobility Suite 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Office 365 Azure RMS Standalone RMS for Individuals *Enterprise Volume Licensing Enterprise Mobility Suite * Office 365 Enterprise E2, E3, E4, K1 Office 365 Education A2, A3, A4 Office 365 Government G3, G4 SharePoint Plan 2 Exchange Online Plan 2  Office 365 Small Business Office 365 Small Business Premium Office 365 Midsize Business  © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enterprise Mobility Suite 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Office 365 Azure RMS Standalone RMS for Individuals Organizational Accounts Only! (no „private” email domains like gmail.com, yahoo.com, outlook.com etc.) *Support in the future Enterprise Mobility Suite © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Cloud Subscription Client Devices Azure AD Applications 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows 7 – Pro, Enterprise, Ultimate (x86, x64) 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Computers Supported Features Mobile Devices Windows 7 – Pro, Enterprise, Ultimate (x86, x64) Windows 8, 8.1, 10 – Pro, Enterprise (x86, x64) Mac OSX min. version 10.8 © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Cloud Subscription Azure AD Client Devices Applications Computers 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Computers Supported Features Mobile Devices Windows Phone 8 Android 4.0.3 iPhone, iPad iOS 7.0 Windows 8 RT, 8.1 RT © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Office 2010, 2011 (Mac), 2013, , 2016, Office Online 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Computers Supported Features Mobile Devices Word, Excel, PowerPoint Office 2010, 2011 (Mac), 2013, , 2016, Office Online FoxIt Reader, Nitro Pro, Polaris Office Samsung Email, OWA for Android RMS Sharing App *Check features before adoption! © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Word, Excel, PowerPoint and Outlook Office 365 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Office Servers RMS Sharing Word, Excel, PowerPoint and Outlook Office 365 Office Professional Plus 2013, 2016 Office Professional 2010* *Must: RMS Sharing App, Office Pro Plus 2010 to publish; any Office Pro 2010 can use © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

RMS Sharing Application for Windows Mobile SDK 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Office Servers RMS Sharing RMS Sharing Application for Windows Mobile SDK © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

SharePoint Server 2010 > 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Office Servers RMS Sharing Exchange Server 2010 > SharePoint Server 2010 > Windows Server 2012, 2012 R2 for FCI support © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Cloud Subscription Client Devices Azure AD Applications 11/3/2017 5:55 PM Cloud Subscription Azure AD Client Devices Applications Internet Connection © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Usage Supports Does not support Public Key Encryption RSA 2048 11/3/2017 5:55 PM Usage Supports Public Key Encryption RSA 2048 Public Key Signing SHA 256 AES 128 for Symmetric Encryption Does not support AD RMS AND Azure RMS at the same time AD RMS to Azure RMS Migration © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Application Support Supports In Office Office Applications 11/3/2017 5:55 PM Application Support Supports Office Applications File Servers RMS Sharing application RM SDK RMS For Individuals In Office Native document protection © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Exchange and SharePoint Online 11/3/2017 5:55 PM Exchange and SharePoint Online Protection Scenarios: Outlook Web App RMS Support Protection and Transport rules Office 365 Message Encryption Data Loss Prevention (DLP) Policies Exchange ActiveSync IRM SharePoint Files, Libraries © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Additional Windows File Servers – FCI RMS SDK 11/3/2017 5:55 PM Additional Windows File Servers – FCI File Classification Infrastructure Automatic Protection based on Classification policies Greatly increased security – No Admin access to files RMS SDK Integrate protection to Apps Just 3 lines of code: GetTemplateList, IpcfEncryptFile, IpcfDecryptFile © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Additional RMS for Individuals FREE!  11/3/2017 5:55 PM Additional RMS for Individuals FREE!  NO support for personal accounts  i.e. Gmail, Yahoo… For those who have to consume protected files but do not have organizational implementation © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Rights Management in Azure & Office 365

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo Demo title

Photo layout 1 Main topic 1: size 40pt Main topic 2: size 40pt 11/3/2017 5:55 PM Photo layout 1 Main topic 1: size 40pt Size 20pt for the subtopics Main topic 2: size 40pt Main topic 3: size 40pt © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM Section title © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Type that is size 54pt and larger should be condensed by 1pt 11/3/2017 5:55 PM Character spacing Type that is size 54pt and larger should be condensed by 1pt Type that is smaller than 54pt should be normal © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Sample charts & tables 11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Adoption curve Type 4 Type 5 Type 3 Type 2 Type 6 Type 1 Type 7 (17%) (12%) Type 3 (11%) Type 4 (19%) Type 6 Type 5 (14%) Type 7 (15%) Category 1 Category 2

Table Column 1 Column 2 Column 3 Column 4 Column 5 Column 6 Column 7 Row 1 17% 12% 11% 19% 14% 15% Row 2 78% 61% 36% 25% 2% Row 3 24% 18% 21% 9% 8% Row 4 64% 46% 41% 47% 26% Row 5 63% 44% 50% 28% 39% 35% Row 6 4% 1% Row 7 5% 3% Row 8 6% Row 9 7% 0%

Clean and modern 80 want to try it again 89 would purchase it 11/3/2017 5:55 PM Clean and modern 80 want to try it again 89 would purchase it 68 are indifferent 77 totally love it © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11/3/2017 5:55 PM Pie chart 1 © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Horizontal bar chart Label 1 Label 2 Label 3 Label 4 Label 5 11/3/2017 5:55 PM Horizontal bar chart Label 1 Label 2 Label 3 Label 4 Label 5 © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2 column table Tables are easy to modify 11/3/2017 5:55 PM 2 column table Tables are easy to modify Text Tip: To quickly add a row, place cursor in this last cell and hit Tab key © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3 column table Tables are easy to modify 11/3/2017 5:55 PM 3 column table Tables are easy to modify Table header Text Tip: To quickly add a row, place cursor in this last cell and hit Tab key © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Izpolnite anketo! Vam je bilo predavanje všeč? Ste se naučili kaj novega? Vaše mnenje nam veliko pomeni! Da bo NT konferenca prihodnje leto še boljša, vas prosimo, da izpolnite anketo o zadovoljstvu, ki jo najdete v svojem NTK spletnem profilu.

11/3/2017 5:55 PM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.