What a user who's left uses Rights Management Services .. ..

to lock a document.

Have no fear, the super user is here.

Employing Super Users for Document RecoveryDocument recovery is a key area of support in the Microsoft IT environment. RMS enables Microsoft IT to have a person or team of people assigned membership in an RMS Super User distribution group for efficient document recovery. If RMS rights are applied to a key document and the publisher subsequently becomes incapacitated or leaves the company before the policies can be removed, the Super User group can enable the editing or complete removal of the policies set by the original publisher. Microsoft IT has limited membership in the Super User group to a small number of highly trusted individuals. In addition, only in specifically defined business cases can a member of the Super User group intervene to annul the policies of a rights-protected document.

Having a means to remove publisher-assigned policies is sound corporate policy. Like most businesses and organizations, Microsoft considers all intellectual material that employees create at work by using its corporate network and computing resources to be Microsoft property. Microsoft needs to retain the ability to recover its property if, for example, a malicious user intentionally protects a document with IRM policies. Additionally, the ability to recover rights-protected documents is necessary for legal reasons in cases of discoverability in a court of law.

 

More info on our deployment of RMS can be found here https://www.microsoft.com/technet/security/secnews/articles/deploying\_rmswp.mspx