(72) Set up Microsoft Purview Message Encryption

Microsoft Purview Message Encryption allows organizations to share protected email with anyone on any device. Users can exchange protected messages with other Microsoft 365 organizations, as well as third-parties using Outlook.com, Gmail, and other email services.

To verify Microsoft Purview Message Encryption has been configurated in Exchange Online PowerShell, do the following:

1. Run PowerShell as Administrator.

2. Enter the following:

Install-Module ExchangeOnlineManagement

Import-Module ExchangeOnlineManagement

Connect-ExchangeOnline

3. Run the following: Get-IRMConfiguration which will show a value of $True for the AzureRMSLicensingEnabled parameter, which indicates that Microsoft Purview Message Encryption is configured in the tenant

If it is not, run the following: Set-IRMConfiguration -AzureRMSLicensingEnabled $true to set the value of AzureRMSLicensingEnabled to $True to enable Microsoft Purview Message Encryption.

4. To test the IRM, run the following where:

Test-IRMConfiguration -Sender securityadmin@emailaddress.com -Recipient securityadmin@emailaddress.com

5. Next to update existing rules to use Microsoft Purview Message Encryption.

Go to https://portal.office.com/Adminportal then select All admin centers then select Exchange.

6. In the Exchange admin center, select Mail flow then select Rules.

7. Select Add a rule and select drop down message: Apply Office 365 Message encryption and right protection to messages.

8. Enter a name of the transport rule and select the optional settings the organisation needs. From select RMS template, select Encrypt.

9. Under Review and finish, select Finish.