Using File Classification Infrastructure (FCI) and AD RMS to automatically protect sensitive information

First published on TECHNET on Jan 30, 2010
Windows Server 2008 R2 File Classification Infrastructure provides a built-in solution for file classification allowing administrators to automate manual processes with predefined policies based on the data’s business value.  ( Windows Server 2008 R2 File Classification Infrastructure – Managing data based on business value )

The Active Directory Rights Management Services Bulk Protection Tool provides a command-line interface that you can use to decrypt AD RMS protected files. You can also use it to encrypt multiple files to a predefined rights policy template.

Together, the AD RMS Bulk Protection Tool and FCI, can be used to create file classification and encryption based on pre-defined rules

• Discover and classify: You can configure the FCI automatic classification to automatically classify files that contain sensitive information such as keywords (e.g.: Confidential) or regular expressions (e.g.: ddd-dd-dddd for a social security combination) on your file server
• Protect: Configure the FCI file management tasks to apply RMS protection to all files that are marked as sensitive

Step by step guidance on how to protect sensitive information using FCI and AD RMS is available at: Active Directory Rights Management Services Bulk Protection Tool and File Classification Infrastructure Step-by-Step



For all related FCI blog posts: http://blogs.technet.com/filecab/archive/tags/File+Classification+Infrastructure+_2800_FCI_2900_/default.aspx