http://www.microsoft.com/en-us/server-cloud/windows-server/active-directory-overview.aspx
Active Directory Rights Management Services
Your organization’s intellectual property should be safe and highly secure. Active Directory Rights Management Services (AD RMS), a component of Windows Server 2008 R2, is available to help make sure that only those individuals who need to view a file can do so. AD RMS can protect a file by identifying the rights that a user has to the file. Rights can be configured to allow a user to open, modify, print, forward, or take other actions with the rights-managed information. With AD RMS, you can now safeguard data when it is distributed outside of your network.
AD RMS可以对一个文件做到以下几种级别的控制:完全控制,查看,编辑,保存,导出(另存为