Microsoft KB Archive/917589

= The temporary rights account certificate for Office 2003 documents is not valid when you set the &quot;Validity period of temporary certificates&quot; setting to a value that is more than 43,200 minutes =

Article ID: 917589

Article Last Modified on 5/11/2006

-

APPLIES TO


 * Microsoft Office Professional Edition 2003
 * Microsoft Office Standard Edition 2003
 * Microsoft Office Small Business Edition 2003
 * Microsoft Office Student and Teacher Edition 2003
 * Microsoft Office Basic Edition 2003

-





SYMPTOMS
You are using a computer that is running Microsoft Windows Rights Management Services (RMS). If you set the Validity period of temporary certificates setting on this computer to a value that is more than 43,200 minutes, the temporary rights account certificate that is created for Microsoft Office 2003 documents is not valid. And, the temporary rights account certificate cannot be used.



CAUSE
This behavior is by design. In Office 2003, the temporary rights account certificate feature was originally intended to allow users who are guests on other computers to access documents to which they have rights. For example, a temporary rights account certificate is used when a user is working at a public kiosk or in another user's office. This certificate is designed to expire after 15 minutes. This behavior prevents other users from using the temporary rights account certificate to maliciously access documents to which they do not have rights. If you extend a temporary rights account certificate, the extended certificate may pose a security risk when the user is no longer granted the rights to access the documents. For example, this behavior may occur if you extend the certificate beyond 30 days.



WORKAROUND
To help minimize the security risks when you want to provide temporary access to Office 2003 documents, we recommend that you do not try to extend a temporary rights account certificate for more than 30 days (43,200 minutes).

Additional query words: office2003 office2k3 office11 off2003 off2k3 off11

Keywords: kbsecurity kbtshoot kbexpertiseinter kbprb KB917589

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.