locked
Azure RMS Issues (on-premise RMS connector template sync issues) RRS feed

  • Question

  • The problem>

    It was easy to enable Rights Management Services in Azure AD and provision templates for Office365 (Exchange Online) users, but somehow we’re struggling to make it work on-premises.

    RMS Connectors are deployed (2 of them as suggested by Microsoft) and we have NLB to balance requests between them.

    RMS Connectors are installed on separate servers (not directly on protected servers such as Exchange or Sharepoint).

    Authorization rules are defined and we’ve selected computer object for the Exchange Server.

    Exchange Server (2016) is configured to use RMS connectors (over HTTPS) by running the following script:

    .\GenConnectorConfig.ps1 -ConnectorUri https://rmsconnector.contoso.com -SetExchange2013

     

    Enabled IRM features on Exchange Server:

    Set-OwaMailboxPolicy -IRMEnabled $true

    Set-IRMConfiguration -SearchEnabled $true

    Set-IRMConfiguration -ClientAccessServerEnabled $true

    Set-IRMConfiguration –InternalLicensingEnabled $true

    We did some tests and everything looked good:

    Test-IRMConfiguration -sender someone@contoso.com   PASSED

    Until we tried to list RMS templates on Exchange server.

    Two default templates (company name - Confidential and company name - Confidential view only) are synced correctly but none of the custom made templates are synced back to on-premise Exchange Server.

    Get-RMSTemplate in Azure returns 6 templates and same command on Exchange Server returns only 3.

    Why is this happening and how can we troubleshoot this further?

    Regards,
    Marko 



    Wednesday, December 14, 2016 11:00 AM

Answers

  • I just got it fixed.

    When you create RMS template in Azure RMS make sure you've checked "Application Compatibility" on the Scope tab in order to sync templates back to the on-premise organization.

    Use OWA to force reload of templates (New email, Permissions > loading permissions may take a while and while you wait for permissions to reload, check Exchange powershell > get-RMStemplates)

    Regards,
    Marko


    Wednesday, December 14, 2016 12:47 PM