Information Rights Management (IRM) & SharePoint - can the system administrators view the content of a protected file?

Question

We are considering deploying a MOSS site for our HR department but there is some concern over the system administrators being able to access the highly confidential material regarding performance and salaries. It appears that IRM is the silver bullet we are looking for providing the MOSS System Administrators CAN NOT open the documents to view the content.

Can anyone confirm that IRM will secure the content from our Sys Admins in our MOSS Site?

Thanks! -Tim

Answer 1

There are 2 ways in using IRM with SharePoint:

1. SharePoint integrated mode: In this mode, IRM is applied on the document on the fly with correct permission when the user download it. In this case the document is stored unprotected, so administrator with direct access to the SQL database can view the content of the document.

2. "Standard": If IRM is applied on the document before uploading it to SharePoint, the document is stored protected (there are 2 protections: SharePoint permissions AND IRM permissions). So even SQL administrator won't be able to extract the document in this case. However, there are some side effects: for example search won't work as the search engine won't be able to extract the content of the document.

In your case, you will need to use the second solution: encrypt the documents before uploading them to SharePoint.

Answer 2

I'm interested in the first way of using IRM with Sharepoint: 'The Sharepoint Integrated Mode'. But the problem is that when I enable IRM on a document library by creating a Policy, and then I try to open a word document (an un-restricted document) from document library after uploading it in the document library, the document doesn't open and I'm left with a blank Microsoft Word window. This doesn't happen with I try to open a restricted document from document library (by restricted document I mean that some permissions are assigned to it from within Microsoft Word before uploading it to the document library). Can you tell me why I'm not able to view an unprotected Word document within an IRM enabled document library?

Answer 3

Have you looked at Adeptol Rights management for sharepoint at www.adeptol.com