By gi ta s tin hnh ci t dch v Active Directory Rights Management Services Ti my DC Server bn chn Server Manager -> Roles ->

Add Roles Tip tc chn Active Directory Rights Management Services trong mn hnh Select Server Roles

Chn Active Directory Rights Management Server trong mn hnh Select Role Services

Trong mn hnh Create or Join an AD RMS Cluster chn Create a new AD RMS cluster

Tip tc chn Use Windows Internal Database on this server trong mn hnh Select Configuration Database

Ti ca s Specify Service Account bn click chn Specify

Nhp User/Pass ca Account gccomRMS vo

Tip tc chn Use AD RMS centrally managed key storage trong mn hnh Configure AD RMS Cluster Key Storage

Nhp Password ca gccomRMS vo trong ca s Specify AD RMS Cluster Key Password

Gi nguyn gi tr mc nh trong Select AD RMS Cluster Web Site

Ti mn hnh Specify Cluster Address bn chn mc Use an SSL-encrypted connection (https://) Nhp tn ca CA Server vo Fully-Qualified Domain Name, nhp vo Validate xc thc tn CA Server l ng

Nhp tn ca CA Server vo Name the Server Licensor Certificate

Chn Register the AD RMS service connection point now trong ca s Register AD RMS Service Connection Point

Nh vy n y ta hon tt vic ci t dch v RMS By gi ta s tin hnh Test th dch v RMS. Ti my Client bn ng nhp vi Usergccom1 v to mt vn bn mi trong MS Word

Nhp vo Office Button chn Prepare -> Restrict Permission -> Restricted Access

Nhp User/Pass ca chnh mnh vo ca s login vi c php: [Username]@[Domain Name]

Mn hnh Permission hin ra bn chn Restrict permission to this document Tip tc nhp vo Read

Add User gccom2 vo

Lm tng t cho mc Change, bn Add user gccom3 vo

Nh vy vi vic la chn nh trn vn bn do gccom1 to ra ny ch c gccom3 l c quyn thay i ni dung cn gccom2 th ch c quyn xem khng c quyn chnh sa, copy g c Trong MS Word by gi xut hin thm mt Bar vi gi cho ngi xem l vn bn ny c gn bn quyn tc gi

Logon gccom2 v m th vn bn do gccom1 to lc ny nhn thy: - gccom2 ch c th xem ni dung vn bn ny m thi khng c quyn Copy, Paste, Change. - Cc cng c trn MS Word u b m do gccom2 ch c quyn Read m thi

Logon gccom3 v m th vn bn do gccom1 to lc ny nhn thy: - gccom3 c quyn Copy, Paste, Change. vi vn bn ny - Cc cng c trn MS Word u khng b m do gccom3 c ton quyn

Tip theo ta s trin khai RMS trn Microsoft Office Outlook (MOO) Ti my Client ng nhp vi User gccom1 bt MOO ln cu hnh Email Account gccom1 c th Check Mail vi MOO

To mt mail mi gi n gccom2

Tip tc chn mc Set permission on this item chn tip Do Not Forward

Nhp User/Pass ca chnh mnh vo ca s login vi c php: [Username]@[Domain Name]

Trong MOO by gi xut hin thm mt Bar vi gi cho ngi xem l Email ny c gn bn quyn tc gi bi gccom1

Logon vi gccom2 v Check mail th thy nhn c Email do gccom1 gi n nhng vi ch thch l Email ny c gn bn quyn tc gi

Double click vo Email nhn thy: - gccom2 c th xem c ni dung hon ho

- gccom2 ch c th xem ni dung vn bn ny m thi khng c quyn Copy, Paste, Forward.

OK mnh va trnh by xong phn Active Directory Rights Management Services RMS trong 70-648, 70-649 ca MCSA.