Azure AIP for on-premise Exchange with Azure RMS connector

Kevin GAUTHIER 21

We deployed dedicated server 2019 to install RMS connector into our enviroment for on-prem Exchange 2019.

I did all steps by guide
https://learn.microsoft.com/en-us/azure/information-protection/deploy-rms-connector?WT.mc_id=Portal-Microsoft_Azure_Support
https://learn.microsoft.com/en-gb/azure/information-protection/configure-servers-rms-connector

Everyhing seems to be right configured, but i dont see my labels (from Compliance worskpace) in on-prem

Check IRMConfiguration ==> OK

![189253-image.png][1]

Test-IRMConfiguration ==> OK
...
OVERALL RESULT: PASS

I need to know now how can i use and see my AIP Label to create some rules on exchange onprem:
Example : Detect Outgoing emails containing encrypted attachments

Someone could help me to configure it ?

Givary-MSFT 32,306 Reputation points Microsoft Employee

2022-04-04T06:46:16.117+00:00

@Kevin GAUTHIER Thank you for reaching out to us.

Apologies for the delay in answering this post. Just wanted to check you still don't see the labels created in SCC ?

Usually it takes time ( sync ) to appear in Outlook. Let me know if the issue persists, we can troubleshoot further.
Kevin GAUTHIER 21 Reputation points

2022-04-04T06:52:28.143+00:00

Hello,

I don't know i don't understand the product.
but i don't know if i can see the AIP labels on Exchange Rules

or if the RMS connector is just used to allow users on client computer connected on exchange onprem to see the AIP labels

i've see that i've maybe need to install Azure AIP Client on computer

thansk for your helps
Givary-MSFT 32,306 Reputation points Microsoft Employee

2022-04-04T07:16:00.57+00:00

@Kevin GAUTHIER

Yes for the client to see labels created in SCC, need to have Azure AIP client installed on the client device.

As far i know RMS connector does not provide label to be consumed in Exchange OnPrem using the transport rule, Outlook is the only method where you can use labels created in SCC.
Kevin GAUTHIER 21 Reputation points

2022-04-04T07:20:43.067+00:00

ok, i understand more, i'll test this week to add Azure AIP Client in my lab and check if i see some labels define in my AIP settings.

But i've see in the following link that we can use exchange Transport Rules with Department Templates
https://learn.microsoft.com/en-us/azure/information-protection/configure-servers-rms-connector#next-steps

do you know how i can test it in my lab ?
Kevin GAUTHIER 21 Reputation points

2022-04-04T10:08:49.097+00:00
I've test this morning on windows 10 client computer

i've install Azure AIP client on it and Office365

I'm connected with onprem account , i see the default label and custom label

But when i choose the custom label , i've issues error message "Azure Information Protection cannot apply this label because i'ts configured for a protection template that can't be found.

i suspect that it's because i've create new label this morning to start from beginning.
i'll waiting some hours and come back to you

i would like to add some rules or label to test some use case

Detect outgoing email containing confidential encrypted documents

Detect Outgoing email containing MNPI data into subject or body.

if you can help me on this use case.

thanks

Share via

Azure AIP for on-premise Exchange with Azure RMS connector

Your answer