ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    So you need to enable email encryption on Office 365 via PowerShell Script.

    IT Discussion
    4
    5
    1.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GregoryHallG
      GregoryHall
      last edited by

        1. Login to Office 365 Account that is a member of the Global Admins Role.
        2. Enabled Rights Management @ Admin / Service Settings / Rights Management / Manage in the Portal
        3. Install Azure AD Management Admin Tool.
          a. http://www.microsoft.com/en-us/download/details.aspx?id=30339

      Script to setup email encryption on Office 365
      #Enter Office 365 Global Admin Login and Password
      $UserCredential = Get-Credential
      #Import the rights management and msonline PowerShell modules
      Import-Module AADRM
      Import-Module msonline
      $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic - AllowRedirection
      Import-PSSession $Session
      Connect-aadrmservice -Credential $UserCredential
      #Make sure Rights Management is enabled (True)
      Get-aadrmconfiguration
      #Turn on Org Customs - Don't worry if it errors most likely it is already enabled
      Enable-organizationcustomization
      #Configure IRM Key Location and Set the services
      Set-IRMConfiguration -RMSOnlineKeySharingLocation "https://sp- rms.na.aadrm.com/TenantManagement/ServicePartner.svc"
      Import-RMSTrustedPublishingDomain -RMSOnline -name "RMS Online"
      Set-IRMConfiguration -ClientAccessServerEnabled $false
      Set-IRMConfiguration -InternalLicensingEnabled $true
      Test-IRMConfiguration -RMSOnline
      #Add Exchange Online Transport Rules
      New-TransportRule -name "Encrypt" -SubjectContainsWords "Encrypt" -SenttoScope "NotInOrganization" -ApplyOME $true
      New-Transportrule -name "Decrypt" -SentToScope "InOrganization" -RemoveOME $true
      #Disconnect from Office 365 Powershell Session
      Remove-PSSession $Session

      1 Reply Last reply Reply Quote 1
      • DashrenderD
        Dashrender
        last edited by

        What level of Office 365 do you have to have to enabled this?

        I still have a Small Business 365 account (I thought all SB accounts were being changed over to Business Essentials accounts automatically? - maybe I misremembered).

        Looks like this is included in the Enterprise E3 version, drag it's not in E1, for the extra $3/month I'll be easily willing to spend it learning this.

        gjacobseG 1 Reply Last reply Reply Quote 0
        • gjacobseG
          gjacobse @Dashrender
          last edited by

          @Dashrender
          I'm running O365 for NPOs as an E3. '

          Thanks Greg for the assist this week on the Configuring of Encryption. Thus far it has been working great - I just need to publish the 'How To' so they can understand how to access it.

          1 Reply Last reply Reply Quote 0
          • GregoryHallG
            GregoryHall
            last edited by

            http://community.spiceworks.com/how_to/112676-so-you-need-to-enable-email-encryption-on-office-365-exchange-online

            1 Reply Last reply Reply Quote 0
            • Rob DunnR
              Rob Dunn
              last edited by

              You should really reformat that script - add some metadata for context based help, parameters, etc. - it would make it a lot easier to use.

              1 Reply Last reply Reply Quote 2
              • 1 / 1
              • First post
                Last post