Active Directory Rights Management Services (AD RMS ) : Part 10 ( Exchange 2010 and RMS )
Change the pipeline security settings to allow exchange request certificate
On the exchange hub we run the following command (this command will add a system mailbox to the super user group )
Add-DistributionGroupMember RMSsuper -Member FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042
Or just go to the group and add it
note : will take a day for the RMS to make it super user so add it in the week end and continue after
Next we need to enable IRM on internal massages
Set-IRMConfiguration -InternalLicensingEnabled $true
Go to org config >hub transport >create new rule
On the client access server open exchange PowerShell and run
Set-IRMConfiguration -ClientAccessServerEnabled $true
This will enable the OWA IRM
Now the exchange RMS integration ready to be used
note : one processor core on RMS server will be able to encrypt about 50 document per hour so on a given server 400 document per hour (dual processor quad core each ) so if you have 4000 users and some one sent email to the all this will take a bit of time before the emails reach the all users