Forum Discussion

Mattias Frykstrand's avatar
Mattias Frykstrand
Copper Contributor
Mar 19, 2018

Office 365 Azure Information Protection - Do Not Forward permissions

Hi,   We're evaluating the different encryption options in Office365 and ran in to a strange issue with the do not forward option that we're dynamically adding to a specific domain via  mail flow...
exchange
office 365
VasilMichev's avatar
VasilMichev
MVP
Mar 19, 2018

Is Outlook configured for IRM (New message -> File -> Set permissions -> Add the account) and/or the AIP add-in? This is automatically configured in OWA, but for Outlook you still need to have it configured.

Mattias Frykstrand's avatar
Mattias Frykstrand
Copper Contributor
Mar 19, 2018

It's one the receiving side.

 

We have a test tenant that we are sending mails to (tenant B). So in tenant A we have our own mailboxes where we have enabled Azure Information Protection, and then we have created a mail flow rule saying that all mails going to tenant B should be "rights protect message with RMS template: 'Do Not Forward'".

 

And it's when we try to read the mail in tenant B that we got the error. But only in the desktop client.

  • VasilMichev's avatar
    VasilMichev
    MVP
    Mar 20, 2018

    The receiving side also needs to be configured (the templates are received once connected to the AIP/RMS service). If you are referring to the new "OME protection" feature, that one is only supported in the Insider builds of Office for the time being.

    • Mattias Frykstrand's avatar
      Mattias Frykstrand
      Copper Contributor
      Mar 20, 2018

      Shouldn't we at least get a rpmsg file or something then?

       

      I followed the setup in this page:

      https://support.office.com/en-us/article/Set-up-new-Office-365-Message-Encryption-capabilities-built-on-top-of-Azure-Information-Protection-7ff0c040-b25c-4378-9904-b1b50210d00e

       

      And it says :

       

      Unlike Office Message Encryption (OME), these new capabilities provide a unified sender experience whether you're sending mail inside your organization or to recipients outside of Office 365. In addition, recipients who receive a protected email message sent to an Office 365 account in Outlook 2016 or Outlook on the web, don't have to take any additional action to view the message

       

      So it's a bit strange that it only works in outlook web app?

       

      Br

      Mattias

      • Forrest_H's avatar
        Forrest_H
        Steel Contributor
        Mar 29, 2018

        I was able to get this OME working for ONE day using my O365 account as sender and my personal external e-mail as a receiver.  I tried to test with more staff and now all we get is blank pages when trying to view the protected messages.  I am trying to find if there is an outage for the service but I cannot find any mention on how to find known outages or incidents for the Azure OME/IRM service.  I have gone back over every configuration and the tests all return PASS but the web portal serving the messages just gives blank pages regardless of the browser being used.