RMS for internet users

Hello,
Is it possible to use RMS for users accessing the company infrastructure 
(RMS, AD etc...) only from internet with no VPN ?

I have the need to protect documents on MOSS that have to be used by users 
connetting to our MOSS server from the internet, I would prefer not to 
set-up federation nor using .NET Passport. I can create users account with 
e-mail address in my AD for external users but can't give them connection to 
my internal network.

Is this configuration possible ?

Do the RAC Certification request/enrollment and use license request could be 
done with a only internet (http/https) access?

Thanks in Advance for your help.

Regards,
Giovanni

Yes.  An example is RMS works w/Outlook Web Access.  Refer to the deployment 
whitepaper for server placement.


Pat

"Giovanni" <GLR@IOL.IT> wrote in message 
news:uDKmz2TcIHA.4696@TK2MSFTNGP05.phx.gbl...
> Hello,
> Is it possible to use RMS for users accessing the company infrastructure 
> (RMS, AD etc...) only from internet with no VPN ?
>
> I have the need to protect documents on MOSS that have to be used by users

> connetting to our MOSS server from the internet, I would prefer not to 
> set-up federation nor using .NET Passport. I can create users account with

> e-mail address in my AD for external users but can't give them connection 
> to my internal network.
>
> Is this configuration possible ?
>
> Do the RAC Certification request/enrollment and use license request could 
> be done with a only internet (http/https) access?
>
> Thanks in Advance for your help.
>
> Regards,
> Giovanni
>
> 

Thank you for your answer Pat, in this group i saw some message stating that 
internet users are able to get only a Temporary RAC and not a persistent 
RAC, is it true ? If yes, what are the limitations ?

Thank you again.
Giovanni

--------------------------------------------------
"Pat [MSFT]" <patfilot@online.MICROSOFT.COM> wrote in message 
news:07E817F6-C9CC-4795-AD08-9A83560E4F63@microsoft.com...
> Yes.  An example is RMS works w/Outlook Web Access.  Refer to the 
> deployment whitepaper for server placement.
>
>
> Pat

For non-domain computers a temporary RAC is downloaded after domain 
authentication (i.e. there is a prompt for credentials when trying to open 
the rights protected doc).  It is good for 30 minutes (multiple 
opens/closes).  If it expires then the certificate needs to be downloaded 
again (a few seconds).

Another way to solve the problem (if we are talking about mobile employees) 
is to use Outlook 2007 and the RPC over HTTP functionality then the 
certificates are persistant on the machine even without using VPN.  Outlook 
(if running in Cached Exch. Mode) will proactively download (persistent) 
certificates as part of its synch process.

Another option for non-VPN access is Windows Mobile 6 - this is similar to 
the RPC over HTTP functionality but the certificates are not proactively 
downloaded.  I travel a fair bit and tend to review mails and docs on the 
phone for initial response and then open them on my laptop for a more 
in-depth review if needed at a more convenient time.



Pat

"Giovanni" <GLR@IOL.IT> wrote in message 
news:ui1MulncIHA.4140@TK2MSFTNGP04.phx.gbl...
> Thank you for your answer Pat, in this group i saw some message stating 
> that internet users are able to get only a Temporary RAC and not a 
> persistent RAC, is it true ? If yes, what are the limitations ?
>
> Thank you again.
> Giovanni
>
> --------------------------------------------------
> "Pat [MSFT]" <patfilot@online.MICROSOFT.COM> wrote in
message 
> news:07E817F6-C9CC-4795-AD08-9A83560E4F63@microsoft.com...
>> Yes.  An example is RMS works w/Outlook Web Access.  Refer to the 
>> deployment whitepaper for server placement.
>>
>>
>> Pat
>
>