rights management vs access control lists

Can anyone tell me (perfer comments to links) what rights management can do to protect sensitive data and files on corporate network shares/apps that stringent NTFS access control lists cant do?

Or perhaps why would a company deploy rights management as opposed to just getting their ACL's in order? Does rights management remove the need for file share ACL's? Or is it a different purpose?

Where would rights management be required? And how is it controlled?

Ps - is rights management free?
LVL 3
pma111Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
AD RMS does not cost extra and it works in can work with ACLs but does not replace ACLs as a method to protect data

It works with certain apps like exchange, sharepoint, office.

I have to get going for a flight so I can't write more right now but start with these links

http://channel9.msdn.com/Events/TechEd/Australia/2009/SEC303

http://social.technet.microsoft.com/wiki/contents/articles/ad-rms-faq.aspx

Thanks

Mike
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pma111Author Commented:
Thanks Mike - if you get chance to add any more of your comments they are always most welcome.

Prefer your comments to MS links - cheers.
0
MidnightOneCommented:
MS RMS comes bundled with the Windows 2008 and Windows 2008 R2 operating systems, but they do require a SQL back end (and MSDE will do in a pinch).

RMS does things that typical ACLs don't, such as controlling the distribution of files and emails once they leave your control to the great unwashed masses on the internet.

With ACLs for instance, you can prevent users from modifying files, but you can't prevent them from forwarding emails you've sent to them. RMS will allow you to do the latter.
0
pma111Author Commented:
What benefits could it have in terms of SQL Server databases? Or is it more geared to sharepoint/exchange.
0
MidnightOneCommented:
As far as a SQL server back end? Not much by my understanding. RMS deals most with what people can do with the information they're been given access to and not so much with the raw DB itself.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.