Journal message recipients in a distribution group cannot view decrypted message attachments in an Exchange Server 2010 environment

View products that this article applies to.

Symptoms

Consider the following scenario:

You configure a journal rule that sends journal messages to a distribution group in a Microsoft Exchange Server 2010 environment.
You enable the Active Directory Rights Management Services (AD RMS) service to encrypt email messages.
A user in the distribution group logs on to his or her mailbox to view journal messages.

In this scenario, the user cannot view the decrypted message attachment in the journal message.

Cause

This issue occurs because Exchange Server 2010 server does not decrypt the journal message if at least one SMTP address of a distribution group member is not present in any journal rules.

↑ Back to the top

Workaround

To work around this issue, create journal rules for each member of the distribution group.

For example, in the Exchange Management Console, create a mail contact, such as example@domain.com, and then hide these contact details from all address lists. Then, create a journal rule for the example@domain.com contact that sends journal messages to a distribution group member. Repeat the journal rule for each member of the distribution group.

↑ Back to the top