Enabling OME in EXO

If you need to enable OME in EXo, you can follow the above steps:

#Connect to the Azure Rights Management service.

$cred = Get-Credential

Get-Command -Module aadrm

Connect-AadrmService -Credential $cred

#Activate the service.


#Get the configuration information needed for message encryption.

$rmsConfig = Get-AadrmConfiguration

$licenseUri = $rmsConfig.LicensingIntranetDistributionPointUrl

#Disconnect from the service.


#Create a remote PowerShell session and connect to Exchange Online.

$session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $cred -Authentication Basic -AllowRedirection

Import-PSSession $session

#Collect IRM configuration for Office 365.

$irmConfig = Get-IRMConfiguration

$list = $irmConfig.LicensingLocation

if (!$list) { $list = @() }

if (!$list.Contains($licenseUri)) { $list += $licenseUri }

#Enable message encryption for Office 365.

Set-IRMConfiguration -LicensingLocation $list

Set-IRMConfiguration -AzureRMSLicensingEnabled $true -InternalLicensingEnabled $true

#Enable the Protect button in Outlook on the web (Optional).

Set-IRMConfiguration -SimplifiedClientAccessEnabled $true

#Enable server decryption for Outlook on the web, Outlook for iOS, and Outlook for Android.

Set-IRMConfiguration -ClientAccessServerEnabled $true

finally execute the following command to the configuration with the following command

Test-IRMConfiguration -Sender “YourOffice365AdminAccount.onmicrosoft.com”


Teams eDiscovery supported for team users in an Exchange Hybrid!

First of all, I have to say that this announcement has a trick, is it possible to do it, but not by the UI, you need to open a Microsoft ticket support in order to do it (I supose that in a near future will be avalaible trought the UI admin).

To open the support ticket, would be necessary to have the following data:

  • The default domain name of your Office 365 organization.
  • The tenant name and tenant ID of your Office 365 organization.
  • And of course a title or description of the purpose of the support request: for example “Enable Application Content Search for On-premises Users”. This will help route the request to the Office 365 eDiscovery engineering team who will implement the request.

Also take into account that Teams channel conversations are always into Group mailboxes which are always in the cloud, so probably would be not possible to extract this information from the chat for those users who are in a hybrid environment and their Exchange data resised OnPrem.

Then after the ticket has benn submmited, I hope that Support will send us an email, and they will process the request internally.

For more info about this: https://support.office.com/en-us/article/searching-cloud-based-mailboxes-for-on-premises-users-in-office-365-3f7dde1a-a8ea-4366-86da-8ee6777f357c?ui=en-US&rs=en-US&ad=US

Are you still thinking in Distribution lists?

Working with a lot of customers, allows me to see a lot of different things and how comapnies work. I still see some confusion about O365 groups and the traditional distribution lists in Exchange. So sometimes I prefer to organize a meeting to explain some of the features that each of the solutions has, and then set a plan focused on the way of working of the company. So here it is the main point about O365 Groups and DL.

Office 365 Groups vs distribution lists

Distribution list Office 365 Group
Functionalities Enables users to send emails to all members of a group. In addition to the distribution list’s feature, integrates with SharePoint, Yammer, Team, Planner, OneNote, and PowerBI.
PowerShell management Yes, sample cmdlet: Set-DistributionGroup. Yes, sample cmdlet: Set-UnifiedGroup.
EAC management Yes. Yes.
Can send emails to all members of a list Yes, both for internal and external senders. Yes, both for internal and external senders.
Shared inbox No, emails are only distributed to members. Yes.
Defining access type Not available. The option is available.
Document library Not available. Set up automatically in SharePoint.
Shared calendar Not available. Set up automatically.
Required license Any AAD subscription (including free.) Free AAD subscription is enough for most Office 365 Groups’ features. For a full list of available features visit this article.
Restore a deleted group Not available. Office 365 group can be restored for up to 30 days after deletion.
Dynamic membership Possible with Dynamic Distribution Groups. Requires Azure AD premium subscription.