Azure Information Protection Skill

This skill provides expert guidance for Azure Information Protection. Covers best practices, decision making, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: This file may be large. Use the Category Index below to locate relevant sections, then use read_file with specific line ranges (e.g., L136-L144) to read the sections needed for the user's question This skill requires network access to fetch documentation content. Use mcp_microsoftdocs:microsoft_docs_fetch to retrieve full articles.

• Fallback: Use the built-in WebFetch tool if the Microsoft Learn MCP server is not available.

Category Index

Category	Lines	Description
Best Practices	L32-L36	Monitoring and troubleshooting Azure RMS connector health, tracking Azure Rights Management usage, and interpreting logs/metrics for ongoing protection service reliability.
Decision Making	L37-L41	Guidance on choosing between Azure Rights Management and on-premises AD RMS, including feature, deployment, security, and migration considerations.
Configuration	L42-L47	Configuring and deploying the Windows RMS (MSIPC) client and setting required registry values for RMS connectors on servers for Azure Information Protection.
Deployment	L48-L62	Deploying the RMS connector and step-by-step guidance for migrating on-prem AD RMS (keys and policies) to Azure Information Protection, including HSM and software key migration.

Best Practices

Topic	URL
Monitor RMS connector health and Azure RMS usage	https://learn.microsoft.com/en-us/azure/information-protection/monitor-rms-connector

Decision Making

Topic	URL
Decide between Azure Rights Management and AD RMS	https://learn.microsoft.com/en-us/azure/information-protection/compare-on-premise

Configuration

Topic	URL
Configure and deploy the RMS client (MSIPC) on Windows	https://learn.microsoft.com/en-us/azure/information-protection/rms-client/client-deployment-notes
Configure RMS connector registry settings on servers	https://learn.microsoft.com/en-us/azure/information-protection/rms-connector-registry-settings

Deployment

Topic	URL
Configure on-premises servers to use the RMS connector	https://learn.microsoft.com/en-us/azure/information-protection/configure-servers-rms-connector
Deploy Microsoft Rights Management connector for on-premises servers	https://learn.microsoft.com/en-us/azure/information-protection/deploy-rms-connector
Install and configure the RMS connector for AIP	https://learn.microsoft.com/en-us/azure/information-protection/install-configure-rms-connector
Prepare environment for Phase 1 AD RMS to AIP migration	https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase1
Execute Phase 2 of AD RMS to AIP migration	https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase2
Complete Phase 3 of AD RMS to AIP migration	https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase3
Run Phase 4 tasks for AD RMS to AIP migration	https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase4
Finalize Phase 5 of AD RMS to AIP migration	https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase5
Migrate AD RMS deployments to Azure Information Protection	https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-to-azure-rms
Migrate HSM-protected AD RMS key to AIP HSM key	https://learn.microsoft.com/en-us/azure/information-protection/migrate-hsmkey-to-hsmkey
Migrate software-protected AD RMS key to AIP HSM key	https://learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-hsmkey
Migrate software-protected AD RMS key to AIP software key	https://learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-softwarekey