IRM-protected messages cannot be returned in search results if the messages are recorded and sent to an external contact in an Exchange Server 2010 environment

Consider the following scenario:

• You implement journaling in a Microsoft Exchange Server 2010 environment.
• You create a journal rule to enable journaling for the email messages that are sent to a journal recipient. The rule sends journal reports to an external contact.
• You enable journal report decryption so that an Information Rights Management (IRM)-protected message and a decrypted copy of the IRM-protected message are attached to the journal report.
• An IRM-protected message is sent to the journal recipient. The journal report is created and sent to the external contact.

In this scenario, the external contact receives the journal report that contains the IRM-protected message and a winmail.dat file. This prevents the recorded IRM-protected message from being returned in the search or the discovery results.

This issue occurs because the IRM-protected message is hardcoded to be converted to Transport Neutral Encapsulation Format (TNEF) when the Exchange server decrypts the message.

To resolve this issue, install the following update rollup:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about IRM, go to the following Microsoft website:For more information about journaling, go to the following Microsoft website:For more information about journal report decryption, go to the following Microsoft website:For more information about how to enable or disable journal report decryption, go to the following Microsoft website: For more information about content conversion, go to the following Microsoft website: