[ms office - 2016] Activating mail encryption for users

[speckled]

Anyone using encryption via mail flow rules in O365? I am hitting a bit of a wall with this one.

[Steve21]

We have it setup for external stuff but not 24/7 but whats the query?

 

Steve

[speckled]

I am looking to create a rule so if users include the word SecureMail in the subject or body the message will be encrypted automatically. I have activated rights management but when I create the rule I get as far as selecting the RMS template but none are available from the drop down.

[Steve21]

Oh if you're doing it the new way with the templates, you need to create them in Azure AD, then refresh 365 via powershell to get them to show etc.

 

We still have the old method before the templates were done

 

Steve

[speckled]

So the script needed to activate which I used is:#Connect to the Azure Rights Management service.

$cred = Get-Credential

Get-Command -Module aadrm

Connect-AadrmService -Credential $cred

#Activate the service.

Enable-Aadrm

#Get the configuration information needed for message encryption.

$rmsConfig = Get-AadrmConfiguration

$licenseUri = $rmsConfig.LicensingIntranetDistributionPointUrl

#Disconnect from the service.

Disconnect-AadrmService

#Create a remote PowerShell session and connect to Exchange Online.

$session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $cred -Authentication Basic -AllowRedirection

Import-PSSession $session

#Collect IRM configuration for Office 365.

$irmConfig = Get-IRMConfiguration

$list = $irmConfig.LicensingLocation

if (!$list) { $list = @() }

if (!$list.Contains($licenseUri)) { $list += $licenseUri }

#Enable message encryption for Office 365.

Set-IRMConfiguration -LicensingLocation $list

Set-IRMConfiguration -AzureRMSLicensingEnabled $true -InternalLicensingEnabled $true

Set-IRMConfiguration -SimplifiedClientAccessEnabled $true

Set-IRMConfiguration -ClientAccessServerEnabled $true

 

which runs without producing anything of note, but when running the test: Test-IRMConfiguration -Sender [email protected]

it returns the following error:Results : Acquiring RMS Templates ...

- FAIL: Failed to acquire RMS templates. This failure may cause features such as Transport Protection Rules, IRM in OWA, and IRM in EAS to not work

 

 

OVERALL RESULT: FAIL

[Cache]

@speckled - I've just hit the same brick wall - did you find a solution or did you just need to wait for Office 365 to sort its self up?

[speckled]

Hi pal, Basically it was a problem with O365, I logged a call with Microsoft through the portal and they resolved the issue working with me over 2 days.

[Cache]

Thanks, got sorted after an hour on the phone!

[Edu-IT]

So the script needed to activate which I used is:#Connect to the Azure Rights Management service.

$cred = Get-Credential

Get-Command -Module aadrm

Connect-AadrmService -Credential $cred

#Activate the service.

Enable-Aadrm

#Get the configuration information needed for message encryption.

$rmsConfig = Get-AadrmConfiguration

$licenseUri = $rmsConfig.LicensingIntranetDistributionPointUrl

#Disconnect from the service.

Disconnect-AadrmService

#Create a remote PowerShell session and connect to Exchange Online.

$session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $cred -Authentication Basic -AllowRedirection

Import-PSSession $session

#Collect IRM configuration for Office 365.

$irmConfig = Get-IRMConfiguration

$list = $irmConfig.LicensingLocation

if (!$list) { $list = @() }

if (!$list.Contains($licenseUri)) { $list += $licenseUri }

#Enable message encryption for Office 365.

Set-IRMConfiguration -LicensingLocation $list

Set-IRMConfiguration -AzureRMSLicensingEnabled $true -InternalLicensingEnabled $true

Set-IRMConfiguration -SimplifiedClientAccessEnabled $true

Set-IRMConfiguration -ClientAccessServerEnabled $true

 

which runs without producing anything of note, but when running the test: Test-IRMConfiguration -Sender [email protected]

it returns the following error:Results : Acquiring RMS Templates ...

- FAIL: Failed to acquire RMS templates. This failure may cause features such as Transport Protection Rules, IRM in OWA, and IRM in EAS to not work

 

 

OVERALL RESULT: FAIL

 

Did you run this after creating the templates? Can somebody point me in the direction of where the templates are created, as I have a blank dropdown when creating rules at the moment.