project

Active Directory Rights Management Services

Microsoft's on-premises enterprise digital rights management role for Windows Server, combining encryption, certificates and authentication so that usage restrictions travel with a protected document.

Known aliases

AD RMS
Rights Management Services
RMS

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Huntress found four paths to an AD RMS root key that cannot be rotated

Six weeks of lab work on a role Microsoft no longer develops but still supports on Windows Server 2025 ended with an offline decrypt of a protected document and a private key stamped valid until 2258 that nobody can rotate.

Publishers:huntress.com

Reality

Evidence45
Adoption: Insufficient
Hype gap+18
Incentives60
Confidence50