I’ve been playing around with AD RMS and Exchange 2010 integration and believe have come across a documentation error.
First a quick summary of the feature from the help file:
Enabling journal report decryption allows the Journaling agent to attach a decrypted copy of a rights-protected message to the journal report. Before you enable journal report decryption, you must add the Federated Delivery mailbox to the super users group configured on your Active Directory Rights Management Services (AD RMS) server.
In the follow doc which describes how to configure (enable/disable) journal report decryption:
The command to enable journal report decryption is wrong:
It currently reads:
Set-IRMConfiguration -JournalReportEncryptionEnabled $true
I believe it should read
Microsoft have logged the bug so hopefully there will be an updated copy soon!