Configure IRM for Exchange Search and In-Place eDiscovery
Applies to: Exchange Server 2013
In Microsoft Exchange Server 2013, you can configure Information Rights Management (IRM) so that Exchange Search can index IRM-protected messages.
When members of the Discovery Management role group perform an In-Place eDiscovery search, IRM-protected messages are returned in the search results and copied to the Discovery mailbox specified in the search. Furthermore, members of the Discovery Management role group can use Outlook Web App to access the IRM-protected messages that were copied to the Discovery mailbox as a result of the discovery search.
Note
Members of the Discovery Management role group can't access IRM-protected messages exported from a Discovery mailbox to another mailbox or to a .pst file. IRM-protected messages in a Discovery mailbox can be accessed only by using Outlook Web App.
For additional management tasks related to IRM, see Information Rights Management procedures.
What do you need to know before you begin?
Estimated time to completion: 1 minute.
You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Rights protection" entry in the Messaging policy and compliance permissions topic.
IRM must be configured in your Exchange 2013 organization. To learn more, see Enable or Disable IRM for Internal Messages.
The Federation mailbox must be added to the Active Directory Rights Management Services (AD RMS) super users group. To learn more, see Add the Federation Mailbox to the AD RMS Super Users Group.
You can't use the Exchange admin center (EAC) to configure IRM for Exchange Search and In-Place eDiscovery. You must use the Shell.
For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center.
Tip
Having problems? Ask for help in the Exchange forums. Visit the forums at Exchange Server.
Use the Shell to configure IRM for Exchange Search
This example configures IRM to allow Exchange Search to index IRM-protected messages.
Note
By default, the SearchEnabled parameter is set to $true. To disable indexing of IRM-protected messages, set it to $false. Disabling indexing of IRM-protected messages prevents them from being returned in search results when users search their mailbox or when discovery managers use In-Place eDiscovery.
Set-IRMConfiguration -SearchEnabled $true
For detailed syntax and parameter information, see Set-IRMConfiguration.
Use the Shell to configure IRM for In-Place eDiscovery
This example enables members of the Discovery Management role group to access IRM-protected messages that reside in the Discovery mailbox.
Note
By default, the EDiscoverySuperUserEnabled parameter is set to $true. To disable access to IRM-protected messages for members of the Discovery Management role group, set it to $false.
Set-IRMConfiguration -EDiscoverySuperUserEnabled $true
For detailed syntax and parameter information, see Set-IRMConfiguration.
How do you know this worked?
To verify that you have successfully configured IRM for Exchange Search and In-Place eDiscovery, use the Get-IRMConfigurtaion cmdlet to retrieve the IRM configuration information. For an example of how to retrieve the IRM configuration, see Examples in Get-IRMConfiguration.