So you need to enable email encryption on Office 365 via PowerShell Script.
- Login to Office 365 Account that is a member of the Global Admins Role.
- Enabled Rights Management @ Admin / Service Settings / Rights Management / Manage in the Portal
- Install Azure AD Management Admin Tool.
Script to setup email encryption on Office 365
#Enter Office 365 Global Admin Login and Password
$UserCredential = Get-Credential
#Import the rights management and msonline PowerShell modules
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic - AllowRedirection
Connect-aadrmservice -Credential $UserCredential
#Make sure Rights Management is enabled (True)
#Turn on Org Customs - Don't worry if it errors most likely it is already enabled
#Configure IRM Key Location and Set the services
Set-IRMConfiguration -RMSOnlineKeySharingLocation "https://sp- rms.na.aadrm.com/TenantManagement/ServicePartner.svc"
Import-RMSTrustedPublishingDomain -RMSOnline -name "RMS Online"
Set-IRMConfiguration -ClientAccessServerEnabled $false
Set-IRMConfiguration -InternalLicensingEnabled $true
#Add Exchange Online Transport Rules
New-TransportRule -name "Encrypt" -SubjectContainsWords "Encrypt" -SenttoScope "NotInOrganization" -ApplyOME $true
New-Transportrule -name "Decrypt" -SentToScope "InOrganization" -RemoveOME $true
#Disconnect from Office 365 Powershell Session
What level of Office 365 do you have to have to enabled this?
I still have a Small Business 365 account (I thought all SB accounts were being changed over to Business Essentials accounts automatically? - maybe I misremembered).
Looks like this is included in the Enterprise E3 version, drag it's not in E1, for the extra $3/month I'll be easily willing to spend it learning this.
I'm running O365 for NPOs as an E3. '
Thanks Greg for the assist this week on the Configuring of Encryption. Thus far it has been working great - I just need to publish the 'How To' so they can understand how to access it.
You should really reformat that script - add some metadata for context based help, parameters, etc. - it would make it a lot easier to use.