ISSUE
When you create an Office 365 Data Loss Protection (DLP) Policy the Action to “Encrypt email messages (applies only to content in Exchange)” is missing.
RESOLUTION:
Exchange Online Azure AD Rights Management needs to be eneabled.
Download the Exchange Online PowerShell from: https://docs.microsoft.com/en-us/powershell/exchange/exchange-online/exchange-online-powershell?view=exchange-ps
Connect-ExchangeOnline
Connect-AadrmService
(Get-AadrmConfiguration).LicensingIntranetDistributionPointUrl -match “https:\/\/[0-9A-Za-z\.-]*” | Out-Null; $matches[0]
#Copy URL into $list below
$irmConfig = Get-IRMConfiguration
$list = $irmConfig.LicensingLocation
$list += “https://512889fd-d24f-4f29-87e1-7111b27ebada.rms.eu.aadrm.com/_wmcs/licensing“
Set-IRMConfiguration -LicensingLocation $list
Set-IRMConfiguration -internallicensingenabled $true
<\code>