Enabling Information Rights Management with PowerShell

For newly created tenants, an admin has to enable the Information Rights Management (IRM) feature so as users can send encrypted emails or when admins have to apply encryption on outgoing emails via transport rules.

Admins can use the Set-IRMConfiguration cmdlet to configure Information Rights Management (IRM) features for their organization.

To get the status of IRM in your tenant use the following command,

Connect-ExchangeOnline

Get-IRMConfiguration

The parameters InternalLicensingEnabled, ExternalLicensingEnabled, Azure RMSLicensingEnabled should be set to true whereas the parameter LicensingLocation should be set to appropriate URL of the tenant and can be obtained using below command,

(Get-AadrmConfiguration).LicensingIntranetDistributionPointUrl

A typical PowerShell CMDlet to enable IRM is listed below,

Set-IRMConfiguration -ExternalLicensingEnabled $true -InternalLicensingEnabled $true -AzureRMSLicensingEnabled $true -LicensingLocation

(Get-AadrmConfiguration).LicensingIntranetDistributionPointUrl

Once enabled, allow at-least 60 minutes for the changes to be propagated.

More Information: https://docs.microsoft.com/en-us/powershell/module/exchange/set-irmconfiguration?view=exchange-ps