Office 2003 works with Windows Rights Management (as does IE6 with some add-on component you need to install).
Cheers Ken > -----Original Message----- > From: Oliver Marshall [mailto:[EMAIL PROTECTED] > Sent: Wednesday, 22 October 2008 7:03 PM > To: NT System Admin Issues > Subject: RE: Stopping users emailing out internal docs > > Thanks for all the info chaps. > > I think that with some changes to the email policies and a bit of > reporting, as well as some time spent looking at WRM (they are currently > running Office 2003 so won't be any use till they upgrade) then I think > we will easily satisfy the requirements of local law. > > I feel a blog post coming on. > > Olly > > -----Original Message----- > From: Ken Schaefer [mailto:[EMAIL PROTECTED] > Sent: 22 October 2008 01:52 > To: NT System Admin Issues > Subject: RE: Stopping users emailing out internal docs > > Windows Rights Management can stop people printing things. > > Copying stuff to USB keys is pointless - the documents are encrypted. If > you don't have access to the RM server, you can't decrypt the document. > Same with forwarding the document somewhere else. > > You can stop Alt+Print Screen as well. > > You can't stop *analogue* attacks (which is why it's called "Digital" > rights management). If someone brings in a camera and takes a photo of > the screen, then there's not much you can do about that. But analogue > attacks are much slower to execute than digital attacks. > > Cheers > Ken > > > -----Original Message----- > > From: Kennedy, Jim [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, 22 October 2008 11:16 AM > > To: NT System Admin Issues > > Subject: RE: Stopping users emailing out internal docs > > > > > > It also won't stop printing it and faxing it or putting the paper in > their > > pocket. Or <alt> <print screen> and emailing the jpg. Or a hundred > other ways > > we could all dream up. > > > > The OP needs to make enough effort to satisfy the law in his country > so that a > > good faith effort can be shown from what I read in his original post. > If this > > gets him there only the lawyers can say. > > > > ________________________________________ > > From: Sherry Abercrombie [EMAIL PROTECTED] > > Sent: Tuesday, October 21, 2008 4:33 PM > > To: NT System Admin Issues > > Subject: Re: Stopping users emailing out internal docs > > > > Policies to prevent the unauthorized use of usb ports. There's good > software > > that will do this, and will apply even on machines (laptops) that are > off the > > network. > > > > On Tue, Oct 21, 2008 at 3:28 PM, NTSysAdmin > > <[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>> wrote: > > > > Would that stop them dragging & dropping onto a usb stick? > > > > > > > > S > > > > > > > > From: David Lum [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>] > > Sent: Tuesday, October 21, 2008 5:11 PM > > > > To: NT System Admin Issues > > Subject: RE: Stopping users emailing out internal docs > > > > > > > > Good job guys, Information Rights Management, that's it... > > > > http://office.microsoft.com/en-us/help/HA101029181033.aspx > > > > > > > > Dave > > > > > > > > From: Oliver Marshall > > > [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED] > om>] > > Sent: Tuesday, October 21, 2008 12:19 PM > > To: NT System Admin Issues > > Subject: RE: Stopping users emailing out internal docs > > > > > > > > And thats still part of Office Server isn't it ? > > > > > > > > From: Kennedy, Jim > > > [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED] > >] > > Sent: 21 October 2008 20:15 > > To: NT System Admin Issues > > Subject: RE: Stopping users emailing out internal docs > > > > > > > > Microsoft's Rights Management can do much of what you seek. Although > it isn't > > perfect and can be beat it should get you to be able to say you tried > really > > hard to the lawyers. > > > > > > > > > > > > From: Oliver Marshall > > > [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED] > om>] > > Sent: Tuesday, October 21, 2008 2:59 PM > > To: NT System Admin Issues > > Subject: RE: Stopping users emailing out internal docs > > > > > > > > Remember remember..... > > > > > > > > From: David Lum [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>] > > Sent: 21 October 2008 19:43 > > To: NT System Admin Issues > > Subject: RE: Stopping users emailing out internal docs > > > > > > > > I seem to think InfoPath or Groove or some other MS tool can do this > kind of > > job - you can select an e-mail and effectively make it > "unforwardable", it was > > pretty slick...now if I could only remember what product it was... > > > > David Lum // SYSTEMS ENGINEER > > NORTHWEST EVALUATION ASSOCIATION > > (Desk) 971.222.1025 // (Cell) 503.267.9764 > > > > From: Oliver Marshall > > > [mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED] > om>] > > Sent: Tuesday, October 21, 2008 11:00 AM > > To: NT System Admin Issues > > Subject: Stopping users emailing out internal docs > > > > > > > > Hi chaps, > > > > > > > > We've had a case this week of a client who found out a user, who is in > the > > process of being let go, had emailed out to their personal gmail > account a > > copy of all the internal documents, logos, process diagrams, etc. The > user is > > now undergoing disciplinary action and facing possible legal action. > > > > > > > > However, while it's almost impossible to prevent a user from emailing > a > > document out if they really want to, companies are obliged to have a > policy in > > place requiring them not to doing so, and here in the UK that policy > has to be > > seen to be implemented and enforced if it is to be referred to in any > action. > > > > > > > > We've suggested a proper compliance level archival service in order to > allow > > for emails to be restored even when users delete emails from their > machines > > (and their recoverable deleted items in this case). Elsewhere we have > used > > similar services to also report on certain file types, file names and > sizes of > > files being sent, and use them to bounce emails under certain > conditions. > > Bouncing certain emails, while a very limited short-stick, does allow > for the > > policy to be seen to be in place if people are as silly as to send out > > documents with certain names etc (like Accounts2008.xls etc). > > > > > > > > What do other companies do to help either prevent people sending docs > out, or > > to cover themselves legally should they have to take action against a > user for > > doing so, or to highlight when a user is doing so? > > > > > > > > Olly > > > > > > > > -- > > > > G2 Support > > > > Network Support : Online Backups : Server Management > > > > > > > > Email: > [EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]> > > > > Web: http://www.g2support.com<http://www.g2support.com/> > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > Sherry Abercrombie > > > > "Any sufficiently advanced technology is indistinguishable from > magic." > > Arthur C. Clarke > > > > > > > > > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
