SOLVED

Migrate OME mailbox between tenants

%3CLINGO-SUB%20id%3D%22lingo-sub-481084%22%20slang%3D%22en-US%22%3EMigrate%20OME%20mailbox%20between%20tenants%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481084%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20need%20to%20migrate%20a%20couple%20of%20mailboxes%20between%20two%20Office%20365%20tenants.%20The%20source%20tenant%20uses%20OME%20(Office%20365%20Message%20Encryption)%20which%20complicates%20things.%20I%20need%20to%20remove%20the%20encyption%20before%20importing%20to%20the%20target%20tenant.%20Any%20advice%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-481084%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481945%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20OME%20mailbox%20between%20tenants%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481945%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F64%22%20target%3D%22_blank%22%3E%40Tony%20Redmond%3C%2FA%3E%26nbsp%3BThank%20you!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20solution%20is%20to%20export%20to%20.pst%20and%20use%20Powershell%20to%20decrypt%20(via%20Unprotect-RMSFile)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481510%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20OME%20mailbox%20between%20tenants%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481510%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BA%20topic%20covered%20in%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fexiting-office-365-encrypted-messages-documents%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fexiting-office-365-encrypted-messages-documents%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481486%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20OME%20mailbox%20between%20tenants%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481486%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20not%20aware%20of%20any%20products%20that%20decrypt%20messages%20as%20part%20of%20the%20migration%20process%2C%20but%20it's%20certainly%20doable%20via%20the%20API%20or%20PowerShell.%20I%20know%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F64%22%20target%3D%22_blank%22%3E%40Tony%20Redmond%3C%2FA%3E%20will%20love%20this%20thread%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-758620%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20OME%20mailbox%20between%20tenants%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-758620%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F325484%22%20target%3D%22_blank%22%3E%40nalle_jacobsson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20there%20any%20options%20for%20migrating%20from%20one%20tenant%20to%20another%20while%20keeping%20the%20encryption%20intact%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20an%20option%20for%20removing%20the%20encryption%20from%20all%20email%20in%20specific%20inboxes%20prior%20to%20a%20migration%20without%20saving%20them%20to%20PSTs%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-758643%22%20slang%3D%22en-US%22%3ERe%3A%20Migrate%20OME%20mailbox%20between%20tenants%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-758643%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F49905%22%20target%3D%22_blank%22%3E%40Colm%20Counihan%3C%2FA%3E%26nbsp%3Bas%20tenants%20have%20different%20encryption%20keys%2C%20you%20can't%20move%20content%20from%20one%20tenant%20to%20another%20and%20keep%20encryption.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20to%20removing%20encryption%20from%20messages%2C%20the%20issue%20is%20scale%20and%20speed.%20The%20easiest%20and%20quickest%20way%20I%20can%20think%20of%20is%20to%20run%20content%20searches%20to%20find%20and%20export%20messages%20from%20user%20mailboxes%20to%20PSTs.%20Sorry.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi,

 

I need to migrate a couple of mailboxes between two Office 365 tenants. The source tenant uses OME (Office 365 Message Encryption) which complicates things. I need to remove the encyption before importing to the target tenant. Any advice?

 

Thanks!

5 Replies
Highlighted

I'm not aware of any products that decrypt messages as part of the migration process, but it's certainly doable via the API or PowerShell. I know @Tony Redmond will love this thread :)

Highlighted
Best Response confirmed by nalle_jacobsson (New Contributor)
Highlighted

@Tony Redmond Thank you!

 

The solution is to export to .pst and use Powershell to decrypt (via Unprotect-RMSFile)

Highlighted

@nalle_jacobsson 

Are there any options for migrating from one tenant to another while keeping the encryption intact?

 

Is there an option for removing the encryption from all email in specific inboxes prior to a migration without saving them to PSTs?

 

 

@Colm Counihan as tenants have different encryption keys, you can't move content from one tenant to another and keep encryption.

 

As to removing encryption from messages, the issue is scale and speed. The easiest and quickest way I can think of is to run content searches to find and export messages from user mailboxes to PSTs. Sorry.