Microsoft Office Online
Sign in to My Office Online (What's this?) | Sign in

Warning: You are viewing this page with an unsupported Web browser. This Web site works best with Microsoft Internet Explorer 6.0 or later, Firefox 1.5, or Netscape Navigator 8.0 or later. Learn more about supported browsers.

Email this linkEmail this link Printer-Friendly VersionPrinter-Friendly Version Bookmark and ShareShare
Collect and protect confidential HR information
 

HR professionals often work with personal information about employees, such as medical and financial records. This data is useful for developing important HR reports, but it isn't just data — it's private information. Your challenge is to use the data you need to keep your business practices efficient and competitive and still respect employee confidentiality.

Controlling how content is viewed and shared

Information Rights Management (IRM) technology can help protect the confidentiality of employees' personal data by enabling the people who are compiling and sharing the information — HR professionals — to set rules that control how the information can be viewed, by whom, and for how long. It's easy to create confidential content in Microsoft Office Word, Microsoft Office Excel, or Microsoft Office PowerPoint® — and distribute it using Microsoft Office Outlook® 2003 —  by following a few simple steps.

You define permissions for files individually, so that each file is safeguarded appropriately for its content and audience. Recipients can open the document, workbook, or presentation as usual — but they can work with the content only according to the permissions you set.

Set permissions for a file

  1. Start Office Word 2003, Office Excel 2003, or Office PowerPoint 2003, and open or create a document, workbook, or presentation.
  2. On the File menu, point to Permission, and then click Do Not Distribute.
  3. In the Permission dialog box, select the Restrict permission to this <file type> check box.
  4. In the Read and Change boxes, type the names or e-mail addresses of people you want to give permission to.

    If you want to give all users permission, click Give all users Read accessButton image to the right of the Read box, or click Give all users Change access Button imageto the right of the Change box.

  5. Click OK, save your document, workbook, or presentation, and distribute to the people with permission.

ShowTips

More permission options

You can add and refine permission settings by clicking More Options in the Permission dialog box. Do any of the following:

ShowSet an expiration date for content

  1. On the File menu, point to Permission, and then click Do Not Distribute.
  2. In the Permission dialog box, click More Options.
  3. Under Additional permissions for users, select the This <file type> expires on check box, and then select an expiration date from the calendar.

ShowInclude referral information

  1. On the File menu, point to Permission, and then click Do Not Distribute.
  2. In the Permission dialog box, click More Options.
  3. Under Additional settings, select the Users can request additional permissions from check box, and then enter a valid e-mail or Web address — for example, mailto:someone@example.com. Your e-mail address appears in the text box by default.

 Note   If you've previously selected the Remove personal information from file properties on save check box (Tools menu, Options command, Security tab), and you've saved your document, workbook, or presentation after you've restricted permission for it, no referral address appears by default.

ShowAllow users to view content without Microsoft Office 2003

  1. On the File menu, point to Permission, and then click Do Not Distribute.
  2. In the Permission dialog box, click More Options.
  3. Under Additional settings, select the Allow users with earlier versions of Office to read with browsers supporting Information Rights Management check box.

ShowRequire users to connect to the Internet to open content with restricted permission

  1. On the File menu, point to Permission, and then click Do Not Distribute.
  2. In the Permission dialog box, click More Options.
  3. Under Additional settings, select the Require a connection to verify a user's permission check box.

ShowChange a user's access level

  1. On the File menu, point to Permission, and then click Do Not Distribute.
  2. In the Permission dialog box, click More Options.
  3. In the list of users who have permission, click the user whose access level you want to change.
  4. Under Access Level, point to the current access level for that user, click the arrow, and then select a new access level.

Distributing protected files using Outlook

Using IRM, you can create rules and policies that specify who can read messages. This helps to prevent sensitive e-mail messages from getting into the hands of people who shouldn't see them. You can also specify that recipients may not copy, paste, print, forward, or edit the information. You and the recipients of your messages can worry less about information leaks that can lead to negative perceptions among employees.

If recipients don't have Outlook 2003 installed on their computers, they can download the Rights Management Add-on for Microsoft Internet Explorer or another program that supports content with restricted permission.

 Note    When you attach a Microsoft Office 2003 document to a message with restricted permission, you automatically restrict access to the document. If permission is already restricted for the attached document, the attachment retains its existing permission.

The Permission button

Use the Permission button Button image on the Outlook toolbar to restrict permission on an e-mail message for specific recipients. Click Permission Button image again to remove restricted permission. Recipients can open and read an e-mail message with restricted permission just as they would a message that doesn't have restricted permission — but they can't forward, print, or copy the content.

Message expiration

You can set messages to expire so that they are unavailable or obsolete after a certain date. To set an expiration date for a message:

  1. On the Outlook toolbar, click the arrow next to OptionsButton image, and on the drop-down menu that appears, click Options.
  2. In the Message Options dialog box, under Delivery options, select the Expires after check box, choose a date and time, and then click Close.

When a message expires, the message header remains visible in Outlook folders with a line through the header text, but recipients cannot open or take any other actions on the message.

You can set a message expiration date without restricting permission for a message. In this case, when the message expires the header still appears with a line through it, signaling that the message has expired or is no longer valid. However, because the content was not restricted, recipients can continue to open and work with the message.

Permission policies

E-mail administrators can add up to 20 custom permission policies to the Permission submenu of the File menu. These permission policies define who can read messages and what actions recipients can take with those messages. For example, an e-mail administrator might define a policy called "Company Benefits: Confidential" that specifies that a message using that policy can be opened only by people inside the company domain.

Troubleshoot using IRM with Outlook

ShowI want a message with restricted permission to expire on a particular date for the message recipients, but I am worried that I won't be able to access the message after the expiration date.

As the sender of a message with restricted permission, you can access the content after its expiration date.

ShowI was able to open an e-mail message with restricted permission previously, but now I can't.

Permission to open the message may have expired. You might want to contact the sender to ask for the message to be sent again without an expiration date or with a new expiration date.

ShowI replied to an e-mail message with restricted permission, but the original message wasn't included.

When you reply to a message with restricted permission, the message body of the original message isn't included in your reply message. Any attachments to the original message are also removed. However, when you forward a message, the original message is added as an attachment to the forwarded message.

ShowWhen I try to open an e-mail message I received, Microsoft Office Outlook 2003 says I need to use a .NET Passport to access the message.

The sender of the message chose to restrict permission for the message by using a Microsoft Windows Rights Management server that uses Microsoft .NET Passport for authentication (authentication: In a multiuser or network environment, the process of validating user logon information. A name and password are compared to an authorized list, and, if there is a match, access is granted with the level of permission specified.). You must have an Information Rights Management (IRM) license in order to read the message.

If you receive a message with restricted permission applied by the sender using .NET Passport for authentication, you must obtain a .NET Passport for the e-mail address the sender used to contact you. After you have obtained a .NET Passport for this e-mail address, you will be prompted to verify your credentials for the message when you open it. Then you will receive a Rights Management license, and you can read the message.

ShowI can't open an e-mail message with restricted permission when I am working offline.

In some cases, e-mail messages with restricted permission require you to connect to the Internet to verify your credentials and confirm that you have been given permission to read the message. After you have verified your credentials for a document, workbook, or presentation for the first time, you will be able to open the message when you are working offline.

ShowAn attachment I included in a message with restricted permission now has restricted permission, too.

When you compose an e-mail message with restricted permission and include attachments, by default Microsoft Office 2003 documents, workbooks, and presentations that do not have restricted permission take on the permissions that you set for the message. If permission is already restricted for the attached file, it retains its existing permission.

Attached files that do not support restricted permission can be opened by anyone who has permission to open the message.

Viewing content with restricted permission

ShowViewing content when Office 2003 is not available

If you need to read or open content with restricted permission but don't have Office 2003 available on the computer you're using, you can download the Rights Management Add-on for Microsoft Internet Explorer or another program that supports content with restricted permission.

ShowViewing your permissions in Word, Excel, and PowerPoint

In Word, Excel, and PowerPoint, you can view the permissions given to you in the My Permission dialog box. (In the Shared Workspace task pane, click View my permission.)

My Permission dialog box

© 2009 Microsoft Corporation. All rights reserved.