Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

In Microsoft Exchange Server 2010, you can configure Information Rights Management (IRM) so that Exchange Search can index IRM-protected messages.

When members of the Discovery Management role group use Multi-Mailbox Search to perform a discovery search, IRM-protected messages are returned in the search results and copied to the Discovery mailbox specified in the search. Furthermore, in Exchange 2010 Service Pack 1 (SP1) and later, members of the Discovery Management role group can use Outlook Web App to access the IRM-protected messages that were copied to the Discovery mailbox as a result of the discovery search.

Note:
Members of the Discovery Management role group can't access IRM-protected messages exported from a Discovery mailbox to another mailbox or to a .pst file. IRM-protected messages in a Discovery mailbox can be accessed only by using Outlook Web App.

Looking for other management tasks related to managing IRM? Check out Managing Information Rights Management.

Prerequisites

Use the Shell to configure IRM for Exchange Search

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Rights protection" entry in the Messaging Policy and Compliance Permissions topic.

Note:
You can't use the EMC to configure IRM for Exchange Search.

This example configures IRM to allow Exchange Search to index IRM-protected messages.

Note:
By default, the SearchEnabled parameter is set to $true. To disable indexing of IRM-protected messages, set it to $false. Disabling indexing of IRM-protected messages prevents them from being returned in search results when users search their mailbox or when discovery managers use Multi-Mailbox Search.
Copy Code 
Set-IRMConfiguration -SearchEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

Use the Shell to configure IRM for discovery

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Rights protection" entry in the Messaging Policy and Compliance Permissions topic.

Note:
You can't use the EMC to configure IRM for discovery.

This example specifies that members of the Discovery Management role group can access IRM-protected messages that reside in the Discovery mailbox.

Note:
By default, the EDiscoverySuperUserEnabled parameter is set to $true. To disable access to IRM-protected messages for members of the Discovery Management role group, set it to $false.
Copy Code 
Set-IRMConfiguration -EDiscoverySuperUserEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

Other Tasks

After you configure IRM for Exchange Search and discovery, you may also want to: