Protecting Document using Azure Rights Management in Office 365

If you are using Office 365 and sharing documents within your organization and with partners, you can use Azure Rights Management to protect your documents.

I will walk you through the steps needed to setup Azure RMS in Office and how you can share the documents with protection.

  • Signup for Office 365 Trial account. Azure RMS is included with Office 365 for Enterprise E3,E4 and for Education A3 and A4. You may get lost while registering for trial account and you may not see services you would like to see. To make it simple, Please use this link and go to bottom of the page. You will find Free Trial option for E3.


  • Complete the sign up. It make take a while to complete all the setup. Once all the setup is done login to your Office 365 account, go to Admin à Office 365 and click on "Service Settings" on left tab.

  • Go to "Rights Management" and click on "Manage"


  • Click on Manage à Activate. It take 1-2 minutes to activate Azure RMS for your account.

  • Once Activation completes, again come to AccountàOffice 365àservice settings and click on sites.
  • Click on "View site collections and manage additional settings in the SharePoint admin center". Locate "Information Rights Management (IRM)" and select "Use the IRM service specified in your configuration". Click ok.

  • Now click on "OneDrive". Locate Library à Library Settings

  • Go to Library Settings and locate "Information Rights Management"

  • Click on "Information Rights Management" and check "Restrict permission on this library on download"

  • We are done with setting up Azure RMS. Go to "OneDrive" and upload a new document. Try opening the document in Office 365 and you will see a message saying Word Online cannot display the document as it is protected by IRM.



  • Trying opening the document locally on your computer and you will get below protection message.


    Hope you would like this quick walkthrough of setting of Azure RMS. Thank you.

BizTalk Server 2013–New features in a nutshell

Learn all the new features introduced in BizTalk Server 2013.

New features in BizTalk Server 2013

BizTalk Server 2013 provisioning on cloud

Learn how to provision BizTalk Server 2013 VM on cloud and see how you can learn some of the cool quicknlearn BizTalk 2013 labs developed to show integration between BizTalk Server 2013 and Sales force.

BizTalk Server 2013 provisioning on cloud



Enterprise Application Integration and BizTalk

I recently presented on explaining Enterprise Application Integration, various technologies around to achieve EAI and role of BizTalk. Below is the link for Video and presentation.

Enterprise Application Integration and BizTalk Server

Register for Virtual Tech Conference

Just wanted to share with you that if you have any plan on Aug 1st, please post pone as Virtual Tech Conference is arranging some of the great speakers MVPs more in a PAAS style for a day long sessions. Not only this but the tech conf has two dedicated tracks, one for DEVs and one for ITPros. So register and have fun.

Below is the link for registrations.

Right Click and say open in new tab :) and this is not funny


Dev Track -

IT Pro Track -






Creating a Kentico CMS website in Windows Azure

Hi All,

We are thankful to Kentico for helping us out on base license of Kentico CMS for our Nashville Windows Azure User Group. And I am going to share how we created out site using Kentico CMS and learning experience during this exercise.

For those who are hearing first time about Kentico, please visit Kentico website.

Also before you start I would request to have a look at the features available with various editions of licenses. The reason for the same is during site creation this could be a bit confusing the site as you choose however it will not run the live site if feature is not supported through the license.


So Let’s me walk you through the site creation:

Step 1: Sign up for WIndows Azure. If you have not done yet, here is link for you to sign up for 90 days free trial.


Step 2: Once you are done login to Portal.


Step 3: Click on New—> Compute—> Web Site –> From Gallery



Step 4: On load of Gallery, please select CMS –> Kentico CMS


Step 5: Provide your site name, database, Region and subscription information and click next



Step 6: Specify the database user name and password and click next.


Step 7: It will start provisioning the site:


Step 8: After the creation of site click browse the site. it will ask for below information.


Step 9: To get this information step back to Azure management portal, click on the site name and go to Dashboard.


Step 10: Click on “View connection string”. read the datasource name, go back and enter on Kentico site.


Step 11: Next you will be asked for database name. Provide the database name information and click Next.


Step 12: It will start creating all the tables for you. Pretty cool !! It will take some time though. You can have a cup of coffee now.



Step 13: After this it will ask for license key information. Provide your windows azure website name and your First name, last name and email information. On this email, Kentico will send you the client admin portal user id and password. Using that you need to download Kentico CMS for your local development in case you choose to do so.


Step 14: In next step Kentico will ask about the starter site.

Note: With windows azure standard access you will get a free edition of license and it only allows few selected CMS to be used. You will see detailed notifications on this page. For simplicity I am choosing “Personal Site”.



Step 15: Upon selection and say next and it will starting importing template to your personal site. This too will take lots of time and you can finish your coffee.



Step 16: If everything goes well, you will be presented with below message. Click on continue to new website.



Step 17: Here is brand new website. Just procure a good domain name and it is all yours. Hurray !!



What to do next: You can login to CMS Site Manager and edit the content. Also if you want to use Kentico CMS other than Personal Site or Corporate Site or Free Edition, contact Kentico sales and obtain the valid edition of License Key. Under CMS Site Manager –> Licences section provide that key and start building up site of your choice.

Setting up Internet Access between Host Machine and Hyper-V Virtual Machine

One thing which all of us need is seamless internet connectivity from Host machine to our Virtual Machine. Here are few easy steps to achieve this.

Step 1: Open your Hyper-V Manager and click on “Virtual Switch Manager”



Step 2: Now you are presented with “Virtual Switch Manager”, Select “External” and click on “Create Virtual Switch”


Step 3: Provide the name to your Virtual Switch and select the Intel(R) centrino(R) Wireless-N 6150 adapter. You can use depending on what adapter you are presented in your machine. Also select “Allow management operating system to share this network adapter”.

With this step we are done configuring Virtual Switch.


Step 4: Now Select your machine in Hyper-V Manager and then click on “Settings” –> “Network Adapter” and select the newly created Virtual Switch.


Step 5: Start your Virtual Machine and it should be able to identify the Host Internet connection.

Windows Azure BizTalk Services: Part 1 - Creating a new Windows Azure BizTalk Service in Azure Management Portal

Hi All,

Microsoft has announced Windows Azure BizTalk Services for EAI and EDI on day one at TechED North America. These services has been around for quite a long time however it has been released a full fledged Azure Services. Below is Scott Gu post for the reference.


Various other very important posts from product team:


These services will enable enterprise to move its EDI and EAI based solutions to Cloud and with stronger BAA(Business Associate Agreement) and EA (Enterprise Agreement) it could soon become a reality and we will extended and fruitful use of Windows Azure in Microsoft Integration domain which primarily dominated by On-premise BizTalk Server.

So how to start with Windows Azure BizTalk Services:



Signup for Windows Azure. You can sign up for Windows Azure 90 day trial however make sure to enable $200 credit which is being provided by MS for azure accounts. Reason is simple, BizTalk service are Pay As you Go, so may be charge from your first day or BizTalk Service creation. Below is the link for sign up:

2- Down load the WABS SDK:






If you are using Windows 8 or Windows server 2012, I believe installing 64 bit version will make more sense. review the system requirements carefully.


Create a self signed certificate and be ready with its private key. certificate name should be as below:

<BizTalk Service Name>

Now how to create it:

You have two options to create it

Option 1:

Create using Powershell. Below is the screen shot with command however I found issues during exporting the cert as .pfx. I am still trying to figure out how to get past the issue and I will surely post the solution. So what is the better way. Use option 2.


Option 2:

Make use of makecert.exe. If you are using Windows 8, it may be difficult to locate makecert.exe however you can download it from Windows SDK. Since you only need makecert.exe, Windows SDK for     Windows 7 will also work. Download SDK from here:

Use below command to create a self signed cert:

Locate your makecert.exe and run command as below:


Once you are done with creation go to your personal cert store and export the private key cert:


        4 – Create Access Control Service and make note of below items:

a- ACS user name and password

b- Identity issuer and Identity Provider

How to create a Access Control Service: If you are new to Access Control Service, please follow below steps else ignore these steps.

Step 1 – Login to Windows Azure Management Portal

Step 2 – Click on New –> App Services –> Access Control –> Quick Create


             Step 3: Provide a namespace and click on create:


            Step 4: Once the service is successfully created you need to make note of few identities:

                         a- ACS user name and password: To get this, in Windows Azure management portal go to access control and click on manage:


                       b- This will take you to the old Access Control Service management portal. “ManagementClient” will be your user name.


                       c- Click on this and click on “password” as shown below:


                       d- Show password and make a not of this user name and password.


Step 5: How to find Issue Name and Key. Issuer Name and Key will be required to login to Portal.Windows.BizTalk.Net. So how to get this. Before showing how to get this read below msdn notes for the    significant and various uses of Issuer name and Key.

So in our case we need ACS Issuer Name and Issuer Key as we would like to configure the Windows Azure BizTalk Services Portal.

           a- Login to ACS management portal: Click on Service Identity and ‘”owner” will be our Issuer Identity.


                       b- Click on Owner—> Password


                         c-Password will be our Issuer Key.


           Hurray !!!!!! If you done till this point, you are done with prerequisites. Now let’s start creating our First BizTalk Service.


Creating Our First BizTalk Service:

          Step 1: Login to Windows Azure Management Portal and click on New.

          Step 2: Click on App Services –> BizTalk Services


Step 3: Click on Custom create: Provide your BizTalk Service name. Try to keep tracking database and your service name space in the same region for better performance. Once your are done with these click on  next


           Step 4: Select the database name and provide password.


Step 5:  On click on Next you will be prompt to ask your ACS name, user name and password. Provide the user name and password received in Step 4 for Prerequisites 4(Create Access Control Service and make note of below items:).


Step 6: Next Step it will ask for BizTalk Service Certificate. Browse and upload the private key certificate which we created using makecert tool. Provide the password if you have choosen a password during the creation of export of .pfx.



After this step we are almost done. Please be patient as it will take around 30 minutes to provision the service.



After 30 minutes, you will see your services is successfully created.



As a last steps of this exercise click on “Manage”


You will prompted to login to It will ask about your service name, issuer name and key. Provide your service name(BizTalk Service name, do not give fully qualified name), issuer name and key (From Access Control Service) and upon successful login you will presented with BizTalk Service management Portal.




Hope you would have liked this post. In case you have any questions/queries please reach out to me at

Tipping Point webcast with Telenor on June 18

Windows Azure Technical Deep Dive

TalkTalk Business



Dive deep into a real life mobile project using Windows Azure.

TalkTalk Business is a leading telco that provides a suite of broadband, telephone, mobile phone, and IT support services to businesses across the UK.  They wanted to meet the customer demand for mobile access to service information while maintaining secure business requirements for sensitive data. 

To solve this challenge, TalkTalk Business turned to Windows Azure. With a scalable backend provided by Windows Azure Mobile Services and on-premises to cloud messaging through Service Bus Relay, TalkTalk Business was able to provide a consistent experience across devices and platforms while preserving data security.

Come hear from folks at TalkTalk Business about this solution, their best practices and key learnings.


Gary Pretty, Lead Architect

Registration Link:


Another edition of Global Windows Azure Camp for IaaS and Private Cloud

After the successful event of Global Windows Azure Bootcamp! we are excited to present another Azure Bootcamp focused specifically for IaaS (Infrastructure as Service) on June1, 2013.

This one day deep dive class will get you up to speed on developing for Windows Azure. The class includes a trainer with deep real world experience with Windows Azure IaaS features, as well as a series of labs so you can practice what you just learned.


Here is the link for registration: