Requirement #5 for Azure Rights Management: On-premises Infrastructure

Author Name
Yoshi Munchakoopas
  • Author Name
  • Author Name
  • Author Name


The following on-premises server products are supported with Azure RMS when you use the Azure RMS connector, which acts as a communications interface (a relay) between the on-premises servers and Azure RMS. In addition, this configuration requires that you configure directory synchronization between your Active Directory forests and Azure Active Directory.

Exchange Server

Office SharePoint Server

File servers that run Windows Server and use File Classification Infrastructure (FCI)


Because file servers that run Windows Server 2008 R2 do not have a built-in file management task action to apply RMS protection, you cannot use the RMS connector for this scenario. However, you can use File Classification Infrastructure and Azure RMS on these operating systems if you configure a custom file management task to run an executable or script that can protect files by using Azure RMS. For example, a Windows PowerShell script that uses the RMS Protection cmdlets.

You can also use these cmdlets with servers running later versions of Windows Server, with the benefit that these cmdlets can protect all file types. The RMS connector protects Office files only. For how-to instructions, see RMS Protection with Windows Server File Classification Infrastructure (FCI).

The RMS connector is supported on Windows Server 2012 R2, Windows Server 2012, and Windows Server 2008 R2.

For more information about how to configure the RMS connector for these on-premises servers, see Deploying the Azure Rights Management Connector.