For Enterprise or commercial its easy to make changes on the Office 365 following up the article or PowerShell scripts defined.
But for GCChigh things are limited and on public internet things are not much published by Microsoft.
Today I will let you know how you can connect on GCCHigh PowerShell and how you can enable the AIP/MIP label for Groups and Sites.
The circled option by default is grayed out in Office 365 always whether its Enterprise/Education/GCC Microsoft Tenant.
We always have to run bunch of PowerShell commands to enable this feature.
Below are the steps how to enable this option for GCChigh Tenant:
- Open PowerShell as admin
-
Run the below 2 PowerShell commands to install or import the module to recognize the switch or commands you going to run.
Install-Module
AzureADPreview (If old version installed then simply add -Force and it will install newer version)Import-Module AzureADPreview
-
Now we nee to connect to AzureADPreview using the PowerShell.
For commercial its very easy and we can simply enter
Connect-AzureAD
But in our case its GCCHigh and we have to use the below PS:
Connect-AzureAD -AzureEnvironmentName AzureUSGovernment
-
Run this command to check.
Get-AzureADDirectorySettingTemplate
This cmdlet call returns all templates that are available, for example:
-
Run the same PS commands mentioned in the Microsoft Article:
$TemplateId = (Get-AzureADDirectorySettingTemplate | where { $_.DisplayName -eq “Group.Unified” }).Id
$Template = Get-AzureADDirectorySettingTemplate | where -Property Id -Value $TemplateId -EQ
- $Setting = $Template.CreateDirectorySetting()
-
$Setting[“UsageGuidelinesUrl”] = “https://guideline.example.com”
$Setting[“EnableMIPLabels”] = “True”
- New-AzureADDirectorySetting -DirectorySetting $Setting
- $Setting.Values
-
Now we have setting value shown up in Azure and mainly EnableMIPLabels : True
Now you require to connect to S&C PowerShell as Labels are part of Compliance, Yeah S&C is migrated to Exchange online. But Microsoft still have lots of switch required is still in S&C only.
Understood it redirect to Exchange online, but in GCChigh things are different.
- Connect-IPPSSession -ConnectionUri https://ps.compliance.protection.office365.us/powershell-liveid/ -AzureADAuthorizationEndpointUri https://login.microsoftonline.us/common
-
Run the below script to enable labels in Azure:
Execute-AzureAdLabelSync
Now you are good to go ahead and make configuration.
Thanks, and Regards,
Harish Kumar
Info@GoldenFive.net
GOLDENFIVE LLC
