1. Home
  2. Training Library
  3. Microsoft 365
  4. Microsoft 365 Courses
  5. Configuring Information Rights Management in Microsoft 365

Configuring Information Rights Management for Exchange Online

Start course

This course explores Information Rights Management in Microsoft 365 and how to configure it for different workloads including SharePoint, OneDrive, and Exchange Online.

Learning Objectives

  • Learn what Information Rights Management is and what it does
  • Learn how to set up and use the service
  • Learn how to set up Information Rights Management for SharePoint Online and apply Information Rights Management to SharePoint lists and libraries
  • Understand how to configure Information Rights Management for OneDrive
  • Learn how to check the status of Information Rights Management in Exchange Online and how to enable it

Intended Audience

This quick course is intended for those who wish to learn about Information Rights Management in Microsoft 365.


To get the most out of this course, you should have a basic understanding of Microsoft 365.


Hello and welcome back. In this demonstration here, I wanna show you how to confirm that Information Rights Management is enabled for Exchange Online and if it's not, how to go about enabling it. Now, the process for Exchange Online is a little bit or a lot different from SharePoint and OneDrive. To work with Information Rights Management in Exchange Online, you have to break out the trusty PowerShell.

Now, there's only a handful of commands we have to use. So what I'll do here is I'll type 'em out for you and explain 'em as we go. So ultimately, we're gonna use the Get-IRMConfiguration command to check the status of IRM for Exchange Online. If it's not enabled, we'll use the Set-IRMConfiguration command to set it. So on the screen here, I have my PowerShell up and running and we'll start by setting a credential variable so we can log into Exchange Online. And to do that, we'll go $Cred. And we'll do a Get-Credential. And it's gonna ask me for a login. This login is going to be my global admin for my tenant.

At this point what I'm gonna do is connect to Exchange using a variable. So I'm actually gonna paste this command in and I'll just explain it after I paste it in here. And we can see here what we're doing is we're calling New-PowerShell Session or PSSession, and we're pulling that information into a session variable. Essentially what we're doing is we're establishing a session with Exchange Online. Notice the ConfigurationName is Microsoft.Exchange. We have to specific our connection URI, which is standard. And then we're using the credential switch and pulling in the Cred variable.

Basically, we're giving this command our login information that we provided. We're using Basic authentication and allowing redirection. So we'll go ahead and enter. And then what we'll do is we'll import our session. So we're importing our session from the Session variable. And now that we have the session established, we can use the Get-IRMConfiguration command to see where we stand here. And if we look through these options here, we can see AzureRMSLicensingEnabled is set to true. So this means Exchange Online is already enabled for Azure Rights Management.

Now, if we wanted to turn this off, we could use the Set command. So now that we already have AzureRMSLicensingEnabled set to true, there's nothing that we have to do here to enable it. But what I do wanna do is show you the Set-IRMConfiguration command. It's probably gonna fail here because I haven't done anything with it since I've enabled it but I just wanna show you how the command sets up. So if we wanted to disable the AzureRMSLicensing for Exchange Online, we'd use the Set-IRMConfiguration command and that's what we'll do here. And when we use this command, we also use the switch called AzureRMSLicensingEnabled.

Now what we'll try to do here is set this to false, and I'm pretty sure this is gonna fail but before we hit Enter here, just so we can see this here, Set-IRMConfiguration. We use the AzureRMSLicensingEnabled switch and we're setting it to false. And this fails because we haven't imported at least one trusted publishing domain into our organization. Basically, all I did was set up my tenant and Exchange Online was provisioned with AzureRMSLicensingEnabled by default.

So what I'd have to do is import a trusted publishing domain to finish that setup before I go ahead and disable it. So I'm not too worried about this but I just wanted to show you what this Set-IRMConfiguration command looks like. So that's pretty much it. Basically, you connect to Exchange Online via PowerShell. You run the Get-IRMConfiguration command and that will tell you if AzureRMSLicensing is enabled or disabled. If it were disabled, what I would have done here with the Set-IRMConfiguration is set this flag to true and it would have enabled it. So with that, let's call it a wrap.

About the Author
Thomas Mitchell
Learning Paths

Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.

In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.

In his spare time, Tom enjoys camping, fishing, and playing poker.