Forum Discussion

Mattias Frykstrand's avatar
Mattias Frykstrand
Copper Contributor
Mar 19, 2018

Office 365 Azure Information Protection - Do Not Forward permissions

Hi,

 

We're evaluating the different encryption options in Office365 and ran in to a strange issue with the do not forward option that we're dynamically adding to a specific domain via  mail flow rules.

 

If we try to open the mail via the outlook desktop client we get a prompt saying  "You are not signed in to Office with an account that has permission to open this message...". However, we are able to open and read the mail via outlook on the web?

 

Br

Mattias

6 Replies

  • Is Outlook configured for IRM (New message -> File -> Set permissions -> Add the account) and/or the AIP add-in? This is automatically configured in OWA, but for Outlook you still need to have it configured.

    • Mattias Frykstrand's avatar
      Mattias Frykstrand
      Copper Contributor

      It's one the receiving side.

       

      We have a test tenant that we are sending mails to (tenant B). So in tenant A we have our own mailboxes where we have enabled Azure Information Protection, and then we have created a mail flow rule saying that all mails going to tenant B should be "rights protect message with RMS template: 'Do Not Forward'".

       

      And it's when we try to read the mail in tenant B that we got the error. But only in the desktop client.

      • VasilMichev's avatar
        VasilMichev
        MVP

        The receiving side also needs to be configured (the templates are received once connected to the AIP/RMS service). If you are referring to the new "OME protection" feature, that one is only supported in the Insider builds of Office for the time being.