Commands › Exchange Online

Get-M365DataAtRestEncryptionPolicy

Exchange Online ExchangeOnlineManagement Get-*

View existing Microsoft 365 data-at-rest encryption policies.

Quick start script

# Get-M365DataAtRestEncryptionPolicy — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-M365DataAtRestEncryptionPolicy | Format-List

# 3. Export for evidence / drift tracking
Get-M365DataAtRestEncryptionPolicy | Export-Clixml .\M365DataAtRestEncryptionPolicy-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-M365DataAtRestEncryptionPolicy [[-Identity] <DataEncryptionPolicyIdParameter>]
 [-Confirm]
 [-DomainController <Fqdn>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (4)

Parameter	Type	What it controls
-Identity	DataEncryptionPolicyIdParameter	The Identity parameter specifies the Microsoft 365 data-at-rest encryption policy that you want to view. You can use any value that uniquely identifies the policy. For example:
-Confirm	SwitchParameter	This parameter is reserved for internal Microsoft use.
-DomainController	Fqdn	This parameter is reserved for internal Microsoft use.
-WhatIf	SwitchParameter	This parameter is reserved for internal Microsoft use.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.