Apply RMS templates across all OneDrive users
The ability to apply RMS policies across all OneDrive enabled users and folders from the central admin location.
Chad Conrow commented
The Azure RMS hooks are in many ways Microsoft's key differentiator from Dropbox, Box, etc.
This is a real issue for our company. We need the ability to apply at a tenant level
Also working with an education department in Australia where this would impact 40K users across 1600 schools. This should be a global option to a) Turn on and enforce for all libraries created or b) Turn on but allow the users to add/remove RMS. Thanks.
John Strachan commented
This would be a very useful feature for educational clients and other clients that don't have "completely trustworthy" users. The ability to restrict a OneDrive user so that they could only create documents with a specified RMS template applied would be valuable. This may also require re-working of how user permissions are applied to OneDrive sites, since the owner would need to be prevented from removing the RMS template.
This is a deployment blocker for OneDrive for Business in many enterprises. Additionally, administrative control of RMS policies must be taken out of the hands of individual users. Today since each OneDrive for Business user is an admin of their own Site Collection, even if an RMS policy is applied, a clever user could remove it. and that's unacceptable.
if merging business and personal, I'd hope a lot of the security features introduced in business stay and are improved upon. Having to individually manipulate permissions and library settings is not very convenient, especially for sharepoint novices. Default RMS templates where the user can't change permission would be great, as well as data loss detection and prevention. Protecting data once shared or copied externally is a big issue for us.