Home

Guest user and AIP - encrypted email

%3CLINGO-SUB%20id%3D%22lingo-sub-1011272%22%20slang%3D%22en-US%22%3EGuest%20user%20and%20AIP%20-%20encrypted%20email%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1011272%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20guest%20user%20who%20is%20added%20to%20our%20Azure%20AD.%3C%2FP%3E%3CP%3EThis%20person%20is%20technically%20challenged%2C%20and%20I%20am%20not%20getting%20reliable%20information%20on%20what%20the%20problem%20they%20are%20having%20is%20-%20other%20than%20they%20can%20not%20read%20an%20email%20that%20they%20should%20have%20rights%20to.%3C%2FP%3E%3CP%3EI%20have%20no%20idea%20what%20mail%20client%20they%20are%20using%2C%20but%20their%20email%20is%26nbsp%3B%40shaw.ca%20so%20I%20assume%20they%20will%20get%20an%20email%20with%20a%20link%20(like%20the%20one%20below)%2C%20and%20they%20should%20just%20need%20to%20sign%20in%20with%20that%20email's%20associated%20Microsoft%20account%20to%20view%20the%20email%3F%20Is%20that%20correct%3F%20I%20am%20being%20told%20that%20%3CFONT%20color%3D%22%230000FF%22%3E%22I%20am%20directed%20to%20a%20Microsoft%20download%20window%20and%20asked%20if%20I%20want%20to%20sign%20up%20for%20this%20trial%20service%22%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%230000FF%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20640px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F157377iEE65C51B326A289A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22encrypted.png%22%20title%3D%22encrypted.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1011272%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EInformation%20Protection%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ERights%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1019960%22%20slang%3D%22en-US%22%3ERe%3A%20Guest%20user%20and%20AIP%20-%20encrypted%20email%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1019960%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F446800%22%20target%3D%22_blank%22%3E%40Microfiche%3C%2FA%3Ethat%20sounds%20strange%20indeed.%20Could%20it%20be%20that%20he%20is%20directed%20to%20the%20signup%20page%20here%3F%20%3CA%20title%3D%22RMS%20Signup%22%20href%3D%22https%3A%2F%2Faka.ms%2Frms-signup%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Frms-signup%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Frms-for-individuals%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Frms-for-individuals%3C%2FA%3E%20)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1027877%22%20slang%3D%22en-US%22%3ERe%3A%20Guest%20user%20and%20AIP%20-%20encrypted%20email%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1027877%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F446800%22%20target%3D%22_blank%22%3E%40Microfiche%3C%2FA%3E%26nbsp%3BWhen%20sharing%20protected%20documents%20outside%20of%20the%20organization%2C%20if%20they%20don't%20have%20an%20Azure%20tenant%20they%20will%20be%20directed%20to%20open%20a%20free%20Microsoft%20account.%20It's%20only%20few%20clicks%2C%20and%20they%20will%20receive%20an%20email%20in%20their%20mailbox%20to%20validate%20the%20email%20address.%3C%2FP%3E%3CP%3EBe%20careful%20if%20you%20have%20restrictive%20Conditional%20Access%20policies%20for%20external%20users%2Fguest%20accounts.%20If%20you%20block%20AIP%20for%20them%2C%20they%20will%20never%20be%20able%20to%20access%20protected%20documents%20and%20the%20error%20message%20is%20not%20very%20explicit.%3C%2FP%3E%3CP%3ENicolas%2C%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Microfiche
New Contributor

We have a guest user who is added to our Azure AD.

This person is technically challenged, and I am not getting reliable information on what the problem they are having is - other than they can not read an email that they should have rights to.

I have no idea what mail client they are using, but their email is @shaw.ca so I assume they will get an email with a link (like the one below), and they should just need to sign in with that email's associated Microsoft account to view the email? Is that correct? I am being told that "I am directed to a Microsoft download window and asked if I want to sign up for this trial service"

 

encrypted.png

2 Replies

@Microfichethat sounds strange indeed. Could it be that he is directed to the signup page here? https://aka.ms/rms-signup 

(https://docs.microsoft.com/en-us/azure/information-protection/rms-for-individuals )

@Microfiche When sharing protected documents outside of the organization, if they don't have an Azure tenant they will be directed to open a free Microsoft account. It's only few clicks, and they will receive an email in their mailbox to validate the email address.

Be careful if you have restrictive Conditional Access policies for external users/guest accounts. If you block AIP for them, they will never be able to access protected documents and the error message is not very explicit.

Nicolas,

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies