RMS Security Model

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

During its operations, RMS gains access to several resources, including the database server, Active Directory, the message queue, and the local hard disk. In addition, RMS Setup creates and exposes certain resources that are required for its operations, such as SOAP entries, Web pages, logging message queues, and so on. RMS Setup configures DACLs on the resources that it creates and exposes, and also configures IIS authentication for each resource.

This section provides information about how RMS configures security on the resources that it uses, and how RMS gains access to resources during the different phases of its operations: setup, provisioning, and normal.

This section covers:

• RMS Security Groups

• Security Modes for RMS

• Security During RMS Setup

• Security During Provisioning

• Security During Normal RMS Operations