Configure Exchange Online Preview to use Windows Azure AD Rights Management

[Azure Information Protection Team]

First published on CloudBlogs on Jul, 18 2012

Hi folks,

Here is the follow-up post to our earlier post where you can learn more about how to quickly enable Rights management capabilities within the Exchange Online preview. The below might appear complicated at first blush, but will be replaced with a single check-box at release.

I'll let Tejas Patel, provide more details.

Thanks,

Dan

Hi, I'm Tejas, a program manager on the Windows Azure AD Rights Management team, and I just want to provide some quick "jump start" steps for how you try out and get a feel for using Windows Azure AD Rights Management.

Yesterday, we discussed how to enable Rights management capabilities in Windows Azure AD Rights Management and Office 2013 Preview. Today, I'll be discussing how to enable Rights management in Exchange Online Preview via Windows Azure AD Rights Management. If you haven’t read this post you should before trying the steps to enable Rights management features in Exchange Online Preview.

Here are the steps:

Enable Exchange Online Preview rights management capabilities

1. Connect to your Exchange Online account by using Windows PowerShell
2. Login with this command:

• $LiveCred = Get-Credential

3. Begin configuration of Exchange Online:

( If you have never used remote powershell with Exchange Online run the following command: set-executionpolicy remotesigned )

• $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic –AllowRedirection
• Import-PSSession $Session

4. Run the following commands to enable Rights management within Exchange Online (adjust the -name parameter in the second line to match the name of the TPD name in your tenant, "RMS Online - 1" is the correct one in most organizations):

• Set-IRMConfiguration –RMSOnlineKeySharingLocation " https://sp-rms.na.aadrm.com/TenantManagement/ServicePartner.svc "
• Import-RMSTrustedPublishingDomain -RMSOnline -name "RMS Online - 1"
• Set-IRMConfiguration -InternalLicensingEnabled $true

For regions outside North America, please substitute .NA. with .EU. for the European Union, and .AP. for Asia
e.g .: https://sp-rms.eu.aadrm.com/TenantManagement/ServicePartner.svc
e.g .: https://sp-rms.ap.aadrm.com/TenantManagement/ServicePartner.svc

Optionally test the configuration by running the following command:

• Test-IRMConfiguration -sender user@company.onmicrosoft.com

Start using IRM functionality in Outlook Web App

1. Log into Outlook Web access.
2. Create a new mail message and add a recipient.
3. Click the ellipsis( “ … ”) besides the “ INSERT ” option in the tool strip and then select set permissions.
4. Select the “Do Not Forward” template.
5. Send the message to a recipient that is using the Office 365 Preview.
6. The recipient will be able to open the message in Outlook Web Access or Outlook 2013 Preview (if they have configured their computer for Rights management using the steps I provided in yesterday's post ).

As always, please let us know if there are any questions or feedback. I'll be doing other blog posts later this week to help show you some of the other ways you can use Windows Azure AD Rights Management with the Office 365 preview. Tomorrow, I will be discussing how to enable SharePoint Online Preview rights management capabilities.

Thanks,

Tejas