Configure IRM for Exchange Search and In-Place eDiscovery

 

Applies to: Exchange Server 2013

In Microsoft Exchange Server 2013, you can configure Information Rights Management (IRM) so that Exchange Search can index IRM-protected messages.

When members of the Discovery Management role group perform an In-Place eDiscovery search, IRM-protected messages are returned in the search results and copied to the Discovery mailbox specified in the search. Furthermore, members of the Discovery Management role group can use Outlook Web App to access the IRM-protected messages that were copied to the Discovery mailbox as a result of the discovery search.

Note

Members of the Discovery Management role group can't access IRM-protected messages exported from a Discovery mailbox to another mailbox or to a .pst file. IRM-protected messages in a Discovery mailbox can be accessed only by using Outlook Web App.

For additional management tasks related to IRM, see Information Rights Management procedures.

What do you need to know before you begin?

Tip

Having problems? Ask for help in the Exchange forums. Visit the forums at Exchange Server, Exchange Online, or Exchange Online Protection.

What do you want to do?

This example configures IRM to allow Exchange Search to index IRM-protected messages.

Note

By default, the SearchEnabled parameter is set to $true. To disable indexing of IRM-protected messages, set it to $false. Disabling indexing of IRM-protected messages prevents them from being returned in search results when users search their mailbox or when discovery managers use In-Place eDiscovery.

Set-IRMConfiguration -SearchEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

Use the Shell to configure IRM for In-Place eDiscovery

This example enables members of the Discovery Management role group to access IRM-protected messages that reside in the Discovery mailbox.

Note

By default, the EDiscoverySuperUserEnabled parameter is set to $true. To disable access to IRM-protected messages for members of the Discovery Management role group, set it to $false.

Set-IRMConfiguration -EDiscoverySuperUserEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

How do you know this worked?

To verify that you have successfully configured IRM for Exchange Search and In-Place eDiscovery, use the Get-IRMConfigurtaion cmdlet to retrieve the IRM configuration information. For an example of how to retrieve the IRM configuration, see Examples in Get-IRMConfiguration.