Configure IRM for Exchange Search and Discovery

 

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

In Microsoft Exchange Server 2010, you can configure Information Rights Management (IRM) so that Exchange Search can index IRM-protected messages.

When members of the Discovery Management role group use Multi-Mailbox Search to perform a discovery search, IRM-protected messages are returned in the search results and copied to the Discovery mailbox specified in the search. Furthermore, in Exchange 2010 Service Pack 1 (SP1) and later, members of the Discovery Management role group can use Outlook Web App to access the IRM-protected messages that were copied to the Discovery mailbox as a result of the discovery search.

Note

Members of the Discovery Management role group can't access IRM-protected messages exported from a Discovery mailbox to another mailbox or to a .pst file. IRM-protected messages in a Discovery mailbox can be accessed only by using Outlook Web App.

Looking for other management tasks related to managing IRM? Check out Managing Information Rights Management.

Prerequisites

• IRM is configured in your Exchange 2010 organization. To learn more, see Enable or Disable IRM for Internal Messages.

• The Federation mailbox is added to the Active Directory Rights Management Services (AD RMS) super users group. To learn more, see Add the Federation Mailbox to the AD RMS Super Users Group.

Use the Shell to configure IRM for Exchange Search

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Rights protection" entry in the Messaging Policy and Compliance Permissions topic.

Note

You can't use the EMC to configure IRM for Exchange Search.

This example configures IRM to allow Exchange Search to index IRM-protected messages.

Note

By default, the SearchEnabled parameter is set to $true. To disable indexing of IRM-protected messages, set it to $false. Disabling indexing of IRM-protected messages prevents them from being returned in search results when users search their mailbox or when discovery managers use Multi-Mailbox Search.

Set-IRMConfiguration -SearchEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

Use the Shell to configure IRM for discovery

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Rights protection" entry in the Messaging Policy and Compliance Permissions topic.

Note

You can't use the EMC to configure IRM for discovery.

This example specifies that members of the Discovery Management role group can access IRM-protected messages that reside in the Discovery mailbox.

Note

By default, the EDiscoverySuperUserEnabled parameter is set to $true. To disable access to IRM-protected messages for members of the Discovery Management role group, set it to $false.

Set-IRMConfiguration -EDiscoverySuperUserEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

Other Tasks

After you configure IRM for Exchange Search and discovery, you may also want to:

• Enable or Disable IRM for Internal Messages

• Enable or Disable Information Rights Management Logging

 © 2010 Microsoft Corporation. All rights reserved.