Symptoms
Consider the following scenario:
-
You implement journaling in a Microsoft Exchange Server 2010 environment.
-
You create a journal rule to enable journaling for the email messages that are sent to a journal recipient. The rule sends journal reports to an external contact.
-
You enable journal report decryption so that an Information Rights Management (IRM)-protected message and a decrypted copy of the IRM-protected message are attached to the journal report.
-
An IRM-protected message is sent to the journal recipient. The journal report is created and sent to the external contact.
In this scenario, the external contact receives the journal report that contains the IRM-protected message and a winmail.dat file. This prevents the recorded IRM-protected message from being returned in the search or the discovery results.
Cause
This issue occurs because the IRM-protected message is hardcoded to be converted to Transport Neutral Encapsulation Format (TNEF) when the Exchange server decrypts the message.
Resolution
To resolve this issue, install the following update rollup:
2785908 Description of Update Rollup 5 version 2 for Exchange Server 2010 Service Pack 2
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
For more information about IRM, go to the following Microsoft website:
General information about Information Rights ManagementFor more information about journaling, go to the following Microsoft website:
General information about journalingFor more information about journal report decryption, go to the following Microsoft website:
General information about journal report decryptionFor more information about how to enable or disable journal report decryption, go to the following Microsoft website:
Enable or disable journal report decryptionFor more information about content conversion, go to the following Microsoft website:
