The temporary rights account certificate for Office 2003 documents is not valid when you set the "Validity period of temporary certificates" setting to a value that is more than 43,200 minutes (917589)


The information in this article applies to:

  • Microsoft Office Professional Edition 2003
  • Microsoft Office Standard Edition 2003
  • Microsoft Office Small Business Edition 2003
  • Microsoft Office Students and Teachers Edition 2003
  • Microsoft Office Basic Edition 2003

SYMPTOMS

You are using a computer that is running Microsoft Windows Rights Management Services (RMS). If you set the Validity period of temporary certificates setting on this computer to a value that is more than 43,200 minutes, the temporary rights account certificate that is created for Microsoft Office 2003 documents is not valid. And, the temporary rights account certificate cannot be used.

CAUSE

This behavior is by design. In Office 2003, the temporary rights account certificate feature was originally intended to allow users who are guests on other computers to access documents to which they have rights. For example, a temporary rights account certificate is used when a user is working at a public kiosk or in another user's office. This certificate is designed to expire after 15 minutes. This behavior prevents other users from using the temporary rights account certificate to maliciously access documents to which they do not have rights. If you extend a temporary rights account certificate, the extended certificate may pose a security risk when the user is no longer granted the rights to access the documents. For example, this behavior may occur if you extend the certificate beyond 30 days.

WORKAROUND

To help minimize the security risks when you want to provide temporary access to Office 2003 documents, we recommend that you do not try to extend a temporary rights account certificate for more than 30 days (43,200 minutes).
Modification Type:MajorLast Reviewed:5/11/2006
Keywords:kbSecurity kbtshoot kbExpertiseInter kbprb KB917589 kbAudKnowledgeWorker
©2004 Microsoft Corporation. All rights reserved.