用Active Directory Rights Management Services（RMS）来保护文档内容

http://www.microsoft.com/en-us/server-cloud/windows-server/active-directory-overview.aspx

 

Active Directory Rights Management Services

 

Your organization’s intellectual property should  be safe and highly secure. Active Directory Rights Management Services (AD RMS), a component of Windows Server 2008 R2, is available to help make sure that only those individuals who need to view a file can do so. AD RMS can protect a file by identifying the rights that a user has to the file. Rights can be configured to allow a user to open, modify, print, forward, or take other actions with the rights-managed information. With AD RMS, you can now safeguard data when it is distributed outside of your network.

 

 AD RMS可以对一个文件做到以下几种级别的控制：完全控制，查看，编辑，保存，导出（另存为）等。

除了用RMS来对单个文件进行内容保护，还可以把它和SharePoint进行集成，对某个站点的所有内容进行内容保护。

http://technet.microsoft.com/en-us/video/how-do-i-using-ad-rms-to-protect-documents-in-a-sharepoint-document-library.aspx