Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

Enabling journal report decryption allows the Journaling agent to attach a decrypted copy of a rights-protected message to the journal report. Before you enable Journal Report Decryption, you must add the Federated Delivery mailbox to the super users group configured on your Active Directory Rights Management Services (AD RMS) server.

Important:
Members of the super users group are granted an owner use license when they request a license from the AD RMS cluster. This allows them to decrypt all RMS-protected content created by that AD RMS cluster.

Looking for other management tasks related to Information Rights Management (IRM)? Check out Managing Information Rights Management.

Prerequisites

Use the Shell to enable Journal Report Decryption

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Rights protection" entry in the Messaging Policy and Compliance Permissions topic.

Note:
You can't use the EMC to enable Journal Report Decryption.

This example enables Journal Report Decryption for the Exchange organization.

Copy Code 
Set-IRMConfiguration -JournalReportDecryptionEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

Use the Shell to disable Journal Report Decryption

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Rights protection" entry in the Messaging Policy and Compliance Permissions topic.

Note:
   You can't use the EMC to disable journal report decryption.

This example disables Journal Report Decryption for the Exchange organization.

Copy Code 
Set-IRMConfiguration -JournalReportDecryptionEnabled $false

For detailed syntax and parameter information, see Set-IRMConfiguration.

Other Tasks

After you enable Journal Report Decryption, you may also want to: