You implement journaling in a Microsoft Exchange Server 2010 environment.
You create a journal rule to enable journaling for the email messages that are sent to a journal recipient. The rule sends journal reports to an external contact.
You enable journal report decryption so that an Information Rights Management (IRM)-protected message and a decrypted copy of the IRM-protected message are attached to the journal report.
An IRM-protected message is sent to the journal recipient. The journal report is created and sent to the external contact.
In this scenario, the external contact receives the journal report that contains the IRM-protected message and a winmail.dat file. This prevents the recorded IRM-protected message from being returned in the search or the discovery results.
This issue occurs because the IRM-protected message is hardcoded to be converted to Transport Neutral Encapsulation Format (TNEF) when the Exchange server decrypts the message.
To resolve this issue, install the following update rollup:
2785908 Description of Update Rollup 5 version 2 for Exchange Server 2010 Service Pack 2
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about IRM, go to the following Microsoft website: