Office 365 Azure Information Protection - Do Not Forward permissions

[Mattias Frykstrand]

Hi,

We're evaluating the different encryption options in Office365 and ran in to a strange issue with the do not forward option that we're dynamically adding to a specific domain via  mail flow rules.

If we try to open the mail via the outlook desktop client we get a prompt saying  "You are not signed in to Office with an account that has permission to open this message...". However, we are able to open and read the mail via outlook on the web?

Br

Mattias

[#2]

don't know what this means can you explain it to me.

[#3]

Is Outlook configured for IRM (New message -> File -> Set permissions -> Add the account) and/or the AIP add-in? This is automatically configured in OWA, but for Outlook you still need to have it configured.

[#4]

It's one the receiving side.

We have a test tenant that we are sending mails to (tenant B). So in tenant A we have our own mailboxes where we have enabled Azure Information Protection, and then we have created a mail flow rule saying that all mails going to tenant B should be "rights protect message with RMS template: 'Do Not Forward'".

And it's when we try to read the mail in tenant B that we got the error. But only in the desktop client.

[#5]

The receiving side also needs to be configured (the templates are received once connected to the AIP/RMS service). If you are referring to the new "OME protection" feature, that one is only supported in the Insider builds of Office for the time being.

[#6]

Shouldn't we at least get a rpmsg file or something then?

I followed the setup in this page:

Set up new Office 365 Message Encryption capabilities built on top of Azure Information Protection

And it says :

Unlike Office Message Encryption (OME), these new capabilities provide a unified sender experience whether you're sending mail inside your organization or to recipients outside of Office 365. In addition, recipients who receive a protected email message sent to an Office 365 account in Outlook 2016 or Outlook on the web, don't have to take any additional action to view the message

So it's a bit strange that it only works in outlook web app?

Br

Mattias

[#7]

I was able to get this OME working for ONE day using my O365 account as sender and my personal external e-mail as a receiver.  I tried to test with more staff and now all we get is blank pages when trying to view the protected messages.  I am trying to find if there is an outage for the service but I cannot find any mention on how to find known outages or incidents for the Azure OME/IRM service.  I have gone back over every configuration and the tests all return PASS but the web portal serving the messages just gives blank pages regardless of the browser being used.