TechShizz | All posts tagged 'IRM'

Integrating Information Rights Management in Office 365 with SharePoint

Prerequisites

 

To have the ability to enable IRM you need to have the "Design" permission. (This is included in Global Admin)

 

There is only one global settings required to enable IRM in SharePoint. From the SharePoint Admin panel we need to enable IRM.

 

O365 Admin > Admin > SharePoint > Settings

 

 

Information Rights Services

 

 

Once this has been enabled, in site settings from within a SharePoint site (from the library tab in a SharePoint site you can create an IRM policy for the site.

Information Rights Services Settings

===================================================

 

This policy prevents un-supported documents from being uploaded. When tested see the error below.

 

 

This library does not accept files of the given type


Integrating with Exchange


This enables IRM in Office 365 - It will allow the control of content in exchange via use of the menus as shown:

 

Set Permissions - Do Not Forward

It also allows us to create rights protection mail rules in Exchange online:

Apply Right Protecting to Messages

 

 

 

 

 

In order to enable IRM in Exchange online we need to do the following.

 

Open PowerShell as Admin and run the following commands in order.

 

Set-ExecutionPolicy RemoteSigned


$usercred = Get-Credential

$sessioninfo = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/PowerShell -Credential $usercred -Authentication Basic -AllowRedirection


Import-PSSession $sessioninfo


Set-IRMConfiguration -RMSOnlineKeySharingLocation "https://sp.rms.eu.aadrm.com/tenantmanagement/servicepartner.svc"


Import-RMSTrustedPublishingDomain -RMSOnline -Name "RMS Online"


Set-IRMConfiguration -InternalLicensingEnabled $true


Test-IRMConfiguration -RMSOnline


Test-IRMConfiguration -Sender $usercred.username


Remove-PSSession $sessioninfo


Installing Information Right Management for Office 365

IRM needs to be activated first:

Service settings > Rights Management > Manage

Click Activate:

Rights Management is not activated

 

Managing IRM

 

Before we can manage IRM in PowerShell there is an module that needs to be downloaded and installed.

Download the Azure Rights Management Administration Tool - English - United Kingdom

http://www.microsoft.com/en-gb/download/details.aspx?id=30339

 

Remember:

connect-msolservice

 

Then:

 

Import-module aadrm

Connect-aadrmservice -verbose

Enable-aadrm

 

Connect-aadrmservice -verbose

 

Disconnect-aadrmservice