Windows Rights Management Services (also called Rights Management Services, Active Directory Rights Management Services or RMS) is a form of Information Rights Management used on Microsoft Windows that uses encryption and a form of selective functionality denial for limiting access to documents such as corporate e-mail, Word documents, and web pages, and the operations authorized users can perform on them. Companies can use this technology to encrypt information stored in such document formats, and through policies embedded in the documents, prevent the protected content from being decrypted except by specified people or groups, in certain environments, under certain conditions, and for certain periods of time. Specific operations like printing, copying, editing, forwarding, and deleting can be allowed or disallowed by content authors for individual pieces of content, and RMS administrators can deploy RMS templates that group these rights together into predefined rights that can be applied en masse.

The Rights Management Server debuted in Windows Server 2003, with client API libraries made available for Windows XP and Windows 2000 as well. Windows Vista, Windows 7 and Windows Server 2008 also support Rights Management Services. In Windows Server 2008, Windows Rights Management Services has been renamed to Active Directory Rights Management Services, reflecting a higher level of integration with Active Directory. The Rights Management Client is included in Windows Vista and later versions and downloadable for Windows XP, Windows 2000 or Windows Server 2003 ^[1].

Overview[link]

Rights Management Services is used for restricting access to rights-protected content to authorized users only. It uses a client–server architecture, using Windows Server 2003 or Windows Server 2008 to host the Active Directory Rights Management Server that issues RMS licenses. The RMS client is required for creating rights-protected content as well as accessing it. Applications that either create or provide access to protected content must be RMS-aware and have to implement the RMS client APIs explicitly. However, add-ons can be used to make an application RMS-enabled even if it does not natively implement RMS functionality.

RMS-protected documents can be created by RMS-enabled applications. RMS-protected content is encrypted and contains an embedded Usage Policy, which defines the restrictions each user or group has when using the content. The RMS system works by only assigning rights to trusted entities, which are either single users or groups of users. Rights are assigned on a per-entity basis. RMS defines and recognizes several rights by default - such as permission to read, copy, print, save, forward, and edit - and can be extended to recognize additional rights (which each application would have to explicitly implement). In Windows Server 2008, RMS rights can also be assigned to users who have federated trust via Active Directory Federation Services. Thus, a user's rights are treated by the system as if they were merely privileges.

When restricting rights to a document, a trusted entity encrypts a random AES key with an RSA public key that can be validated with the public key certificate in the XrML identity license that is issued to an RMS server. The AES key is used to encrypt the document. When accessing a protected document using an RMS-enabled application, the RMS client runtime authenticates the recipient to the Rights Management server, using the recipient's XrML identity license. The Rights Management server then issues a use license that can be used by the client application together with the RMS client to decrypt the document, which then enforces the document restrictions for that user.

One feature of the RMS system is that documents in certain formats can optionally include an HTML rendering of the document so that the document can be viewed when the intended application is not available. This is enabled using a compound document format. Both versions of the document are subject to the same usage policies, and an RMS-enabled HTML viewer is required to view this alternative form of the document content. For example, Microsoft Office 2003 Professional or greater is able to optionally include an HTML version of the document content. The Rights Management Add-on for Internet Explorer allows users who do not have Microsoft Office 2003 or later installed to view these RM-protected files.

Alternatives[link]

While RMS protection prevents unauthorized users from viewing content, some publishers choose instead to deploy document metrics, which report document unauthorized use. It can sometimes be more valuable to know when and where a stolen document is being used, who "leaked" it, and who's got it now, instead of simply attempting to prevent the theft in the first place. Knowing that a recipient misbehaved with a document can be valuable business knowledge, while not-knowing that they tried-to (and perhaps failed due to RMS) is in some cases less useful.

RMS-enabled Microsoft applications[link]

RMS is supported (implemented) by the following Microsoft products:

• Microsoft Office System 2003 - Word, Excel, PowerPoint, Outlook
• Microsoft Office 2007 - Word, Excel, PowerPoint, Outlook, InfoPath
• Microsoft Office 2010 - Word, Excel, PowerPoint, Outlook, InfoPath
• Microsoft Office for Mac 2011 - Word, Excel, PowerPoint, Outlook
• Microsoft Office SharePoint Server 2003 (through the use of third party solutions such as those from GigaTrust^[2] and Liquid Machines)
• Microsoft Visio 2007 and Project 2007 (through the use of third party solutions such as those from GigaTrust^[3] and Liquid Machines)
• Adobe Acrobat Reader (through the use of third party solutions such as those from GigaTrust^[4], FoxIt Software and Liquid Machines)
• Microsoft Office SharePoint Server 2007
• Microsoft Office SharePoint Server 2010
• Exchange Server 2007
• Exchange Server 2010
• XPS (XML Paper Specification) v1.0
• Internet Explorer (through use of the RM Add-on for IE)
• IIS 6.0 (through the use of GigaTrust WebServer Add-on)

See also[link]

• Windows Server System

References[link]

External links[link]

• Windows Rights Management Services
• RMS Client downloads
• RMS SDK for RMS-enabling applications
• Secure Islands Comprehensive solution leveraging AD RMS
• Troubleshooting Windows Rights Management Services (RMS) - One Root Certification Server Warning

This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (April 2009)

Mohamed "Mo" Amin (29 August 1943 – 23 November 1996) was a Kenyan photojournalist noted for his pictures and videotapes of the Ethiopian famine.

Mohamed Amin was born on 29 August 1943 in Eastleigh, Nairobi and developed an interest in photography at school.^[1] He founded Camerapix company in 1963 in Dar es Salaam and moved the company to Nairobi three years later. During the 1970s he became one of the most relied-upon African news photographers,^[1] reporting on wars and coups all through the continent, and his pictures were often used by Western news media. Amin's most influential moment came when his photos, along with Michael Buerk's reporting of the 1984 Ethiopian famine brought international attention to the crisis and eventually helped start the charity wave that resulted in Live Aid concerts.

Apart from Ethiopian famine, he contributed exclusive photos of the fall of Idi Amin and of Mengistu Haile Mariam, and was author of numerous books, including Journey Through Pakistan, and covered various themes like East African Wildlife and the Uganda Railway.

In 1991 Amin lost his left arm during an ammunition dump explosion in Ethiopia during the Ethiopian Civil War.^[2]

Amin published issues of Selamta, the Ethiopian Airlines in-flight magazine.^[3]

Death[link]

Amin boarded Ethiopian Airlines Flight 961 on November 23, 1996 with 61-year old Brian Tetley, a colleague who wrote text for Amin's photography books, to travel to Nairobi after a business trip to Ethiopia. Hijackers stormed the cockpit of ET-AIZ, the Ethiopian Airlines Boeing B767-260ER used for the flight, and forced the pilot, Leul Abate, to fly east over the Indian Ocean. Amin attempted to rally the passengers to attack the hijackers and confronted the hijackers, trying to stop the scenario. ET-AIZ ran out of fuel and Abate ditched the aircraft off the coast of the Comoros Islands. Amin died at age 53 ^[2] as he stood as ET-AIZ broke to pieces; his body hit the airplane wall, causing his death.^[4] Tetley also died.^[2][5]

Legacy[link]

This unreferenced section requires citations to ensure verifiability.

In June 2006, Mo and Me (see External Links), a documentary film about him was premiered. It won Best International Documentary at the Los Angeles International Film Festival. Al Jazeera media company and Camerapix funded the film. Amin's son, Salim Amin, runs the Camerapix company as of 2008. Mo Amin is the inspiration for the A24 news channel, a proposed independent pan-African 24-hour 'African voice for Africa' which commenced broadcasting from Nairobi on 19 September 2008.

Mohamed Amin worked with numerous journalists and writers, including Tahir Shah, Colin Blane and Michael Buerk.

References[link]

External links[link]

	Kenya portal
	Biography portal
	Ethiopia portal
	Journalism portal
	Photography portal

• Mohamed Amin Foundation
• "Mo & Me" Episode One - Part 1 on YouTube
• "Mo & Me" Episode One - Part 2 on YouTube
• "Mo & Me" Episode Two - Part 1 on YouTube
• "Mo & Me" Episode Two - Part 2 on YouTube
• "Mo & Me" Episode Three - Part 1 on YouTube
• "Mo & Me" Episode Three - Part 2 on YouTube
• "Mo & Me" Episode Four - Part 1 on YouTube
• "Mo & Me" Episode Four - Part 2 on YouTube
• "Mo & Me" Episode Five - Part 1 on YouTube (Labeled as Part 2)
• "Mo & Me" Episode Five - Part 2 on YouTube (Labeled as Part 1)
• "Mo & Me" Episode Six - Part 1 on YouTube
• "Mo & Me" Episode Six - Part 2 on YouTube
• "Mo & Me" Episode Seven - Part 1 on YouTube (Labeled as Part 2)
• "Mo & Me" Episode Seven - Part 2 on YouTube (Labeled as Part 1)
• "Milestones on December 9, 1996 of Time - Announcement of deaths of Mohamed Amin and Brian Tetley