Encrypt options greyed out in Outlook desktop

%3CLINGO-SUB%20id%3D%22lingo-sub-1060978%22%20slang%3D%22en-US%22%3EEncrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1060978%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20Office%20365%20Business%20Premium%20with%20Outlook%20for%20Office%20365%20MSO%20(16.0.12130.20382)%2064-bit%20desktop.%20This%20plan%20does%20not%20support%20Office%20365%20Message%20Encryption%20(OME)%20on%20it's%20own%20but%20I%20added%20Azure%20Information%20Protection%20Premium%20P1.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWith%20this%20set%20up%20I'm%20able%20to%20use%20the%20encrypt%20options%20with%20Outlook%20Web.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F161148iD06130DADE4EECB0%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22owa.jpg%22%20title%3D%22owa.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20Outlook%20desktop%2C%20the%20Encrypt%20button%20is%20available%20but%20the%20OME%20options%20are%20greyed%20out%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F161149iB3334B2DAE18E071%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22owd.jpg%22%20title%3D%22owd.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EShould%20these%20OME%20options%20be%20accessible%20in%20Outlook%20desktop%20with%20this%20setup%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20addition%2C%20I%20sent%20a%20test%20%22Do%20Not%20Forward%22%20encrypted%20message%20from%20Outlook%20Web%20to%20another%20one%20of%20my%20O365%20email%20addresses%20in%20a%20different%20domain.%20This%20is%20supposed%20to%20keep%20the%20recipient%20from%20copying%2C%20printing%20or%20forwarding%20the%20message.%20However%20I%20was%20able%20to%20do%20all%20three%20actions%20after%20receiving%20the%20message.%20Here's%20the%20sent%20message%20showing%20that%20it%20was%20set%20to%20Do%20Not%20Forward%20and%20the%20received%20message%20showing%20that%20it%20was%20forwarded%20after%20receipt%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F161150i0FE48BFC41155C84%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22dnf-sent.jpg%22%20title%3D%22dnf-sent.jpg%22%20%2F%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F161151iEE18B41485B2F1A9%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22dnf.jpg%22%20title%3D%22dnf.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20idea%20what's%20going%20on%20there%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1060978%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOME%20message%20encryption%20encrypt%20Outlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1061264%22%20slang%3D%22en-US%22%3ERe%3A%20Encrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1061264%22%20slang%3D%22en-US%22%3EHi!%3CBR%20%2F%3E%3CBR%20%2F%3EI%20would%20recommend%20working%20through%20the%20following%20document%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fset-up-new-message-encryption-capabilities%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fset-up-new-message-encryption-capabilities%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ESounds%20like%20whilst%20you%20added%20the%20right%20licensing%20(BPrem%20%2B%20AADP1)%20it%20sounds%20like%20elements%20of%20the%20configuration%20haven%E2%80%99t%20been%20completed%20-%20in%20particular%20the%20activation%20of%20the%20rights%20management%20service%20or%20the%20config%20of%20the%20mail%20flow%20rules.%3CBR%20%2F%3E%3CBR%20%2F%3ELet%20me%20know%20how%20you%20get%20on%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1061678%22%20slang%3D%22en-US%22%3ERe%3A%20Encrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1061678%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169605%22%20target%3D%22_blank%22%3E%40Christopher%20Hoard%3C%2FA%3E%26nbsp%3BYep%2C%20tried%20all%20of%20that%20already.%20Everything%20checks%20out%20and%20is%20configured%20correctly.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F161299i93BA099FC56A67DF%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22rights%20mgmnt.jpg%22%20title%3D%22rights%20mgmnt.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1064852%22%20slang%3D%22en-US%22%3ERe%3A%20Encrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1064852%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F99590%22%20target%3D%22_blank%22%3E%40Chris%20McFarling%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EApologies%20-%20just%20to%20confirm%20that%20you%20test%20the%20OME%20configuration%20via%20Powershell%3F%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fset-up-new-message-encryption-capabilities%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fset-up-new-message-encryption-capabilities%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20so%2C%20does%20a%20rip%20and%20re-add%20of%20the%20profile%20light%20it%20up%3F%20Does%20the%20functionality%20work%20in%20Outlook%20on%20the%20Web%3F%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1065301%22%20slang%3D%22en-US%22%3ERe%3A%20Encrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1065301%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169605%22%20target%3D%22_blank%22%3E%40Christopher%20Hoard%3C%2FA%3EYes%2C%20testing%20via%20PowerShell%20checks%20out.%20Outlook%20Web%20works%20as%20well%2C%20see%20original%20post.%20Setting%20up%20an%20Exchange%20rule%20to%20encrypt%20messages%20also%20works.%20It%20just%20doesn't%20work%20in%20Outlook%20desktop.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1154256%22%20slang%3D%22en-US%22%3ERe%3A%20Encrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1154256%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F99590%22%20target%3D%22_blank%22%3E%40Chris%20McFarling%3C%2FA%3E%26nbsp%3B%20Did%20you%20ever%20resolve%20this%3F%20I%20have%20the%20same%20issue.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1154463%22%20slang%3D%22en-US%22%3ERe%3A%20Encrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1154463%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F546661%22%20target%3D%22_blank%22%3E%40darinF12%3C%2FA%3EI%20did%20not.%20I%20think%20it%20simply%20doesn't%20work%20with%20the%20Office%20365%20edition%20of%20Outlook.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2080157%22%20slang%3D%22en-US%22%3ERe%3A%20Encrypt%20options%20greyed%20out%20in%20Outlook%20desktop%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2080157%22%20slang%3D%22en-US%22%3E%3CP%3Ei%20think%20the%20issue%20is%20outlook%20installation%20specific.%26nbsp%3B%20My%20outlook%20app%20has%20the%20IRM%20options%20available%20and%20they%20work%20but%20I%20just%20set%20one%20of%20my%20employees%20up%20and%20his%20IRM%20options%20are%20all%20grayed%20out.%26nbsp%3B%20We%20are%20both%20able%20to%20use%20the%20options%20in%20OWA%2C%20just%20not%20on%20our%20desktop%20version%20of%20Outlook%20365%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I have Office 365 Business Premium with Outlook for Office 365 MSO (16.0.12130.20382) 64-bit desktop. This plan does not support Office 365 Message Encryption (OME) on it's own but I added Azure Information Protection Premium P1.

 

With this set up I'm able to use the encrypt options with Outlook Web.

owa.jpg

 

In Outlook desktop, the Encrypt button is available but the OME options are greyed out

owd.jpg

 

Should these OME options be accessible in Outlook desktop with this setup?

 

In addition, I sent a test "Do Not Forward" encrypted message from Outlook Web to another one of my O365 email addresses in a different domain. This is supposed to keep the recipient from copying, printing or forwarding the message. However I was able to do all three actions after receiving the message. Here's the sent message showing that it was set to Do Not Forward and the received message showing that it was forwarded after receipt:

dnf-sent.jpgdnf.jpg

 

Any idea what's going on there?

7 Replies
Hi!

I would recommend working through the following document

https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities

Sounds like whilst you added the right licensing (BPrem + AADP1) it sounds like elements of the configuration haven’t been completed - in particular the activation of the rights management service or the config of the mail flow rules.

Let me know how you get on

Best, Chris

@Christopher Hoard Yep, tried all of that already. Everything checks out and is configured correctly.

 

rights mgmnt.jpg

Hi @Chris McFarling

Apologies - just to confirm that you test the OME configuration via Powershell?

https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities

If so, does a rip and re-add of the profile light it up? Does the functionality work in Outlook on the Web?

Best, Chris

@Christopher HoardYes, testing via PowerShell checks out. Outlook Web works as well, see original post. Setting up an Exchange rule to encrypt messages also works. It just doesn't work in Outlook desktop.

@Chris McFarling  Did you ever resolve this? I have the same issue.

@darinF12I did not. I think it simply doesn't work with the Office 365 edition of Outlook.

i think the issue is outlook installation specific.  My outlook app has the IRM options available and they work but I just set one of my employees up and his IRM options are all grayed out.  We are both able to use the options in OWA, just not on our desktop version of Outlook 365