Configure IRM for Exchange Search and In-Place eDiscovery

Applies to: Exchange Server 2013

Topic Last Modified: 2012-11-16

In Microsoft Exchange Server 2013, you can configure Information Rights Management (IRM) so that Exchange Search can index IRM-protected messages.

When members of the Discovery Management role group perform an In-Place eDiscovery search, IRM-protected messages are returned in the search results and copied to the Discovery mailbox specified in the search. Furthermore, members of the Discovery Management role group can use Outlook Web App to access the IRM-protected messages that were copied to the Discovery mailbox as a result of the discovery search.

Note:
Members of the Discovery Management role group can't access IRM-protected messages exported from a Discovery mailbox to another mailbox or to a .pst file. IRM-protected messages in a Discovery mailbox can be accessed only by using Outlook Web App.

For additional management tasks related to IRM, see Information Rights Management Procedures.

What do you need to know before you begin?

Estimated time to completion: 1 minute.
You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Rights protection" entry in the Messaging Policy and Compliance Permissions topic.
IRM must be configured in your Exchange 2013 organization. To learn more, see Enable or Disable IRM for Internal Messages.
The Federation mailbox must be added to the Active Directory Rights Management Services (AD RMS) super users group. To learn more, see Add the Federation Mailbox to the AD RMS Super Users Group.
You can't use the Exchange Administration Center (EAC) to configure IRM for Exchange Search and In-Place eDiscovery. You must use the Shell.
For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection

What do you want to do?

Use the Shell to configure IRM for Exchange Search

This example configures IRM to allow Exchange Search to index IRM-protected messages.

Note:
By default, the SearchEnabled parameter is set to `$true`. To disable indexing of IRM-protected messages, set it to `$false`. Disabling indexing of IRM-protected messages prevents them from being returned in search results when users search their mailbox or when discovery managers use In-Place eDiscovery.

	Copy Code
Set-IRMConfiguration -SearchEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

Use the Shell to configure IRM for In-Place eDiscovery

This example enables members of the Discovery Management role group to access IRM-protected messages that reside in the Discovery mailbox.

Note:
By default, the EDiscoverySuperUserEnabled parameter is set to `$true`. To disable access to IRM-protected messages for members of the Discovery Management role group, set it to `$false`.

	Copy Code
Set-IRMConfiguration -EDiscoverySuperUserEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.

How do you know this worked?

To verify that you have successfully configured IRM for Exchange Search and In-Place eDiscovery, use the Get-IRMConfigurtaion cmdlet to retrieve the IRM configuration information. For an example of how to retrieve the IRM configuration, see Examples in Get-IRMConfiguration.