Enterprise Vault™ Setting up Exchange Server and Office 365 for SMTP Archiving

Last Published:
Product(s): Enterprise Vault (14.5)
  1. Configuring Exchange Server for an Enterprise Vault SMTP Archiving solution
    1.  
      About using Enterprise Vault SMTP Archiving for Exchange Server journaling
    2.  
      Summary of steps
    3.  
      Creating a remote domain using the Exchange Management shell
    4.  
      Creating a recipient mail contact in the remote domain
    5.  
      Creating a Send Connector for the remote domain
    6.  
      Setting up Exchange Server journaling
    7.  
      Points to note when setting up Enterprise Vault SMTP Archiving servers
  2. Configuring Office 365 for Enterprise Vault SMTP Archiving
    1.  
      About using Enterprise Vault SMTP Archiving for Office 365 journaling
    2.  
      Summary of steps
    3.  
      Creating an Office 365 to Enterprise Vault Send Connector
    4.  
      Points to note when setting up Enterprise Vault SMTP Archiving servers
  3. Configuring the Azure RMS Decryption feature for Office 365 email encryption support
    1.  
      About configuring the Azure RMS Decryption feature for Office 365 email encryption support
    2.  
      Summary of steps
    3.  
      Configuring IRM settings for journal report decryption in your organization
    4.  
      Getting the Rights Management configuration details of your Azure tenant
    5.  
      Creating a new service principal that represents your tenant to external applications
    6.  
      Adding the service principal to the list of superusers for your organization
    7.  
      Installing Microsoft Right Management Services Client 2.1
    8.  
      Configuring the decryption of RMS-protected messages in Enterprise Vault
  4. Configuring decryption of MPIP-protected Office 365 emails archived in Enterprise Vault
    1.  
      About configuring the MPIP decryption feature in Enterprise Vault
    2.  
      Summary of steps
    3.  
      Disable decryption of journal report in your organization
    4.  
      Register an application with the Azure Active Directory
    5.  
      Assign the required permissions to an application
    6.  
      Upload certificates
    7.  
      Configure decryption of MPIP-protected emails in Enterprise Vault

Disable decryption of journal report in your organization

By default, journal report decryption is enabled in your organization. As a result, decrypted copies of protected emails are attached to the journal report sent to the Enterprise Vault SMTP Service. Since Enterprise Vault can now decrypt Microsoft Purview Information Protection (MPIP) protected emails for a preview of the items in Discovery Accelerator, there is no requirement to send the decrypted copies of protected emails attached to the journal report.

  • Verify the Information Rights Management (IRM) configuration settings for journal report decryption in your organization by using the Get-IRMConfiguration cmdlet. For more information, see Get-IRMConfiguration.

  • If journal report decryption is enabled on the IRM settings, run the following command to disable it:

    Set-IRMConfiguration -JournalReportDecryptionEnabled $false

    For more information, see Set-IRMConfiguration.

The following PowerShell commands can be executed by Exchange Administrator or Office 365 Administrator:

Command:

#Retrieve the Information Rights Management (IRM) configuration in your organization.

Set-ExecutionPolicy RemoteSigned

$Cred = Get-Credential

$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri

https://ps.outlook.com/powershell/ -Credential $Cred -Authentication Basic - AllowRedirection

Import-PSSession $Session

Get-IRMConfiguration

Command:

#Test Information Rights Management (IRM) configuration and functionality.

Test-IRMConfiguration -Sender '<sender email adress>'

Command:

#Disable decryption of journal report in your organization

Set-IRMConfiguration -JournalReportDecryptionEnabled $false