Ensure SharePoint identifies data type, specification, and usage when transferring information between different security domains so policy restrictions may be applied.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Central Administration > Security > Configure information rights management. Finding if 'Do not use IRM on this server' is selected or a configuration error is shown (e.g. '... IRM will not work until the client is configured properly'). RMS must be located via AD or specified.

How it is fixed

Fix method: Guidance or infrastructure patch

Central Administration > Security > Configure information rights management: select 'Use the default RMS server specified in Active Directory' or specify the RMS server; ensure 'Do not use IRM on this server' is not selected.