Admin control for attachments now available in Office 365 Message Encryption

Published Jun 13 2018 01:05 PM 46.4K Views
Microsoft

EDITORS NOTE 1/3/2019

We have updated the blog to reflect that we've expanded the ability to control if Office attachments are protected for recipients inside Office 365 - previously this was only supported for non-Office 365 users. Changes are reflected below in the blog. 

 

Summary

Administrators can now control whether Office attachments are protected for recipients inside and outside of Office 365 when the Encrypt-Only template is used.  This was a key ask from Office 365 Message Encryption customers and is now available as a tenant-level setting.

 

Background

 

We have now made it possible for administrators to control how Encrypt-Only behaves for attachments. By default, when a user sends an email and attachments using Encrypt-only, the Office attachments are also protected with Encrypt-Only permissions and that encryption persists throughout lifecycle of the content. To provide more flexible controls for recipients, organizations can control if recipients have unrestricted permissions on the attachment or not for Encrypt-Only emails. For example, one scenario this is valued is when a doctor shares a protected attachment to her patient, and the patient wants to share this with his family, the attachment is no longer encrypted so they can open the attachment without any additional steps.

 

What is available 

 

Admins can control whether attachments have unrestricted permissions for Encrypt-Only emails. Details on implementing the settings are below.

 

When the recipient signs-in to the Office 365 Message Encryption portal, they can preview attachments as before. 

 

Preview attachments _1.png

 

  

If the control to unrestrict the attachment is enabled, the document will be decrypted and the recipient will be able to view it normally. Additionally, the content will remain decrypted and unrestricted unless additional protections are applied.

 

Document is decrypted_2.png

 

Scope

 

This setting is available for the Encrypt-only template and not for the Do Not Forward or Custom templates.

 

It’s enforced at the tenant level.

 

How to control the setting

 

To manage whether to allow recipients to download Encrypt-only attachments without encryption, follow these steps:

 

Connect to Exchange Online Using Remote PowerShell (see https://aka.ms/exopowershell)

Run the Set-IRMConfiguration cmdlet with the DecryptAttachmentForEncryptOnly parameter as follows:

 

Set-IRMConfiguration - DecryptAttachmentForEncryptOnly <$true|$false>

 

For example, to allow download of attachments without protection for Encrypt-only:

Set-IRMConfiguration - DecryptAttachmentForEncryptOnly $true

 

If you decide that you want to revert the setting and keep attachments protected even after download:

Set-IRMConfiguration - DecryptAttachmentForEncryptOnly $false

 

Please note, as of 12/13/18, we have deprecated  DecryptAttachmentFromPortal. It will continue working for existing customers who have run the old cmdlet but new customers should start using the new cmdlet (DecryptAttachmentForEncryptOnly) updated above.

 

Additional Resources

 

This was a key ask from organizations that had a broad set of scenarios which requires email recipients to "own" the attachment by unrestricting permissions on the attachment. We hope this additional control can provide more flexibility in collaborating on protected content for all users. Your feedback matters- leave us a comment below or go to uservoice and submit your feedback/vote! 

 

For additional resources on Office 365 Message Encryption - you can find them below:

 

 

 

28 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-204007%22%20slang%3D%22en-US%22%3EAdmin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-204007%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%20size%3D%225%22%3EEDITORS%20NOTE%201%2F3%2F2019%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3EWe%20have%20updated%20the%20blog%20to%20reflect%20that%20we've%20expanded%20the%20ability%20to%20control%20if%20Office%20attachments%20are%20protected%20for%20recipients%20inside%20Office%20365%20-%20previously%20this%20was%20only%20supported%20for%20non-Office%20365%20users.%20Changes%20are%20reflected%20below%20in%20the%26nbsp%3Bblog.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3ESummary%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3EAdministrators%20can%20now%20control%20whether%20Office%20attachments%20are%20protected%20for%20recipients%20inside%20and%20outside%20of%20Office%20365%20when%20the%20Encrypt-Only%20template%20is%20used.%20%26nbsp%3BThis%20was%20a%20key%20ask%20from%20Office%20365%20Message%20Encryption%20customers%20and%20is%20now%20available%20as%20a%20tenant-level%20setting.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3EBackground%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20have%20now%20made%20it%20possible%20for%20administrators%20to%20control%20how%20Encrypt-Only%20behaves%20for%20attachments.%20By%20default%2C%20when%20a%20user%20sends%20an%20email%20and%20attachments%20using%20Encrypt-only%2C%20the%20Office%20attachments%20are%20also%20protected%20with%20Encrypt-Only%20permissions%20and%20that%20encryption%20persists%20throughout%20lifecycle%20of%20the%20content.%20To%20provide%20more%20flexible%20controls%20for%20recipients%2C%20organizations%20can%20control%20if%20recipients%20have%20unrestricted%20permissions%20on%20the%20attachment%20or%20not%20for%20Encrypt-Only%20emails.%20For%20example%2C%20one%20scenario%20this%20is%20valued%20is%20when%20a%20doctor%20shares%20a%20protected%20attachment%20to%20her%20patient%2C%20and%20the%20patient%20wants%20to%20share%20this%20with%20his%20family%2C%20the%20attachment%20is%20no%20longer%20encrypted%20so%20they%20can%20open%20the%20attachment%20without%20any%20additional%20steps.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3EWhat%20is%20available%3C%2FFONT%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAdmins%20can%20control%20whether%20attachments%20have%20unrestricted%20permissions%20for%20Encrypt-Only%20emails.%20Details%20on%20implementing%20the%20settings%20are%20below.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhen%20the%20recipient%20signs-in%20to%20the%20Office%20365%20Message%20Encryption%20portal%2C%20they%20can%20preview%20attachments%20as%20before.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F64621iA967C84F105FDDC9%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Preview%20attachments%20_1.png%22%20title%3D%22Preview%20attachments%20_1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20the%20control%20to%20unrestrict%20the%20attachment%20is%20enabled%2C%20the%20document%20will%20be%20decrypted%20and%20the%20recipient%20will%20be%20able%20to%20view%20it%20normally.%20Additionally%2C%20the%20content%20will%20remain%20decrypted%20and%20unrestricted%20unless%20additional%20protections%20are%20applied.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20998px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F64622i707E3BB971086CCF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Document%20is%20decrypted_2.png%22%20title%3D%22Document%20is%20decrypted_2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3EScope%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20setting%20is%20available%20for%20the%20Encrypt-only%20template%20and%20not%20for%20the%20Do%20Not%20Forward%20or%20Custom%20templates.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt%E2%80%99s%20enforced%20at%20the%20tenant%20level.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3EHow%20to%20control%20the%20setting%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20manage%20whether%20to%20allow%20recipients%20to%20download%20Encrypt-only%20attachments%20without%20encryption%2C%20follow%20these%20steps%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EConnect%20to%20Exchange%20Online%20Using%20Remote%20PowerShell%20(see%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fexopowershell%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Fexopowershell%3C%2FA%3E)%3C%2FP%3E%0A%3CP%3ERun%20the%20Set-IRMConfiguration%20cmdlet%20with%20the%20DecryptAttachmentForEncryptOnly%20parameter%20as%20follows%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESet-IRMConfiguration%20-%20DecryptAttachmentForEncryptOnly%20%26lt%3B%24true%7C%24false%26gt%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20example%2C%20to%20allow%20download%20of%20attachments%20without%20protection%20for%20Encrypt-only%3A%3C%2FP%3E%0A%3CP%3ESet-IRMConfiguration%20-%20DecryptAttachmentForEncryptOnly%20%24true%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20decide%20that%20you%20want%20to%20revert%20the%20setting%20and%20keep%20attachments%20protected%20even%20after%20download%3A%3C%2FP%3E%0A%3CP%3ESet-IRMConfiguration%20-%20DecryptAttachmentForEncryptOnly%20%24false%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPlease%20note%2C%20as%20of%2012%2F13%2F18%2C%20we%20have%20deprecated%20%26nbsp%3BDecryptAttachmentFromPortal.%20It%20will%20continue%20working%20for%20existing%20customers%20who%20have%20run%20the%20old%20cmdlet%20but%20new%20customers%20should%20start%20using%20the%20new%20cmdlet%20(DecryptAttachmentForEncryptOnly)%20updated%20above.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20size%3D%225%22%3EAdditional%20Resources%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20was%20a%20key%20ask%20from%20organizations%20that%20had%20a%20broad%20set%20of%20scenarios%20which%20requires%20email%20recipients%20to%20%22own%22%20the%20attachment%20by%20unrestricting%20permissions%20on%20the%20attachment.%20We%20hope%20this%20additional%20control%20can%20provide%20more%20flexibility%20in%20collaborating%20on%20protected%20content%20for%26nbsp%3Ball%20users.%20Your%20feedback%20matters-%20leave%20us%20a%20comment%20below%20or%20go%20to%20%3CA%20href%3D%22https%3A%2F%2Fmsip.uservoice.com%2Fforums%2F600097-azure-information-protection%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Euservoice%3C%2FA%3E%20and%20submit%20your%20feedback%2Fvote!%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20additional%20resources%20on%20Office%20365%20Message%20Encryption%20-%20you%20can%20find%20them%20below%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fmanage-office-365-message-encryption-09f6737e-f03f-4bc8-8281-e46d24ee2a74%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EManage%20Office%20365%20Message%20Encryption%3C%2FA%3E%20settings%20such%20as%20branding%2C%20decryption%20on%20download%20for%20Encrypt-only%2C%20etc.%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FOffice-365-Message-Encryption-FAQ-0432dce9-d9b6-4e73-8a13-4a932eb0081e%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EOffice%20365%20Message%20Encryption%20FAQ%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EBlog%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FSecurity-Privacy-and-Compliance%2FEncrypt-only-rolling-out-starting-today-in-Office-365-Message%2Fba-p%2F162718%22%20target%3D%22_blank%22%3EEncrypt%20only%20rolling%20out%20starting%20today%20in%20Office%20365%20Message%20Encryption%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Fdeploy-use%2Fconfigure-usage-rights%23encrypt-only-option-for-emails%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Information%20Protection%20-%20Configure%20usage%20rights%20for%20encrypt%20only%20option%20for%20emails%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-204007%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301672%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301672%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20cmdlet%20is%20replaced%20by%26nbsp%3BSet-IRMConfiguration%20-DecryptAttachmentForEncryptOnly%20%24true.%20Can%20you%20use%20that%20instead%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301664%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301664%22%20slang%3D%22en-US%22%3E%3CP%3ESet-IRMConfiguration%20-DecryptAttachmentFromPortal%20%24true%3C%2FP%3E%3CP%3EThis%20command%20is%20not%20working.%20Microsoft%20Support%20could%20not%20fix%20it.%20They%20could%20not%20run%20this%20command%20neither.%20This%20is%20so%20frustrating.%20we%20need%20this%20feature%20but%20there%20is%20no%20way%20to%20make%20it%20happen.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20anyone%20find%20a%20way%20to%20run%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-222497%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-222497%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F50311%22%20target%3D%22_blank%22%3E%40Caroline%20Shin%3C%2FA%3EArgh.%20I%20was%20on%20vacation%2C%20so%20I%20missed%20this..%20Is%20it%20still%20possible%20to%20get%20an%20answer%20to%20my%20question%3F%20%3A)%3C%2Fimg%3E%20%26nbsp%3B%3CSPAN%3EI%20wondering%20on%20how%20we%20can%20open%20the%20mail%20in%20the%20portal%20if%20we%20want%20to%20decrypt%20the%20attached%20documents.%20If%20we%20do%20send%20to%20an%20Office%20365%20customer%20or%20internal%20recipient%20with%20new%20Outlook%2C%20the%20inline%20function%20works.%20But%20then%20we%20are%20unable%20to%20decrypt%20the%20documents%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-221388%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-221388%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F156853%22%20target%3D%22_blank%22%3E%40P%20Roby%3C%2FA%3E%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F165251%22%20target%3D%22_blank%22%3E%40Alex%20Bean%3C%2FA%3E%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F164010%22%20target%3D%22_blank%22%3E%40Christian%20Knarvik%3C%2FA%3E%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F8462%22%20target%3D%22_blank%22%3E%40Mark%20Galvin%3C%2FA%3E%2C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F94459%22%20target%3D%22_blank%22%3E%40Vamsi%20Krishna%20Gunta%3C%2FA%3E%2C%20thanks%20for%20your%20questions%20and%20engaging%20with%20us%20here.%20Due%20to%20the%20interest%20and%20general%20questions%2C%20we%20decided%20to%20host%20an%20AMA.%20Note%2C%20that%20it's%20not%20just%20for%20questions%20but%20we%20are%20also%20using%20this%20as%20an%20opportunity%20to%20get%20feedback%20on%20new%20investments.%20We%20hope%20you%20can%20join%20us%20tomorrow!%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FOffice-365-Encryption-AMA%2FAnnouncing-an-Office-365-Message-Encryption-AMA%2Fm-p%2F216186%23M66%26nbsp%3B%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FOffice-365-Encryption-AMA%2FAnnouncing-an-Office-365-Message-Encryption-AMA%2Fm-p%2F216186%23M66%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217374%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217374%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F165251%22%20target%3D%22_blank%22%3E%40Alex%20Bean%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20now%20resolved%20the%20issue%20with%20tech%20support.%20The%20tenancy%20hadn't%20finished%20the%20upgrade%20to%20our%20existing%20admin%20accounts.%20However%20creating%20a%20new%20admin%20account%20and%20running%20the%20command%20as%20the%20new%20account%20worked!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-216682%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-216682%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F165251%22%20target%3D%22_blank%22%3E%40Alex%20Bean%3C%2FA%3E%26nbsp%3BNo%20joy%20at%20all%20yet%2C%20I%20am%20going%20to%20raise%20another%20ticket.%20I%20personally%20think%20our%20tenancy%20has%20not%20yet%20been%20updated.%20I%20really%20need%20this%20feature!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-216677%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-216677%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F156853%22%20target%3D%22_blank%22%3E%40P%20Roby%3C%2FA%3E%26nbsp%3B%20Did%20you%20manage%20to%20find%20a%20solution%20to%20this%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20getting%20the%20exact%20same%20error%20running%20ps%20command.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20spoken%20to%20MS%20Office%20365%20support.%20They've%20repeatedly%20sent%20me%20an%20out%20of%20date%20link%20to%20download%26nbsp%3BWindows%20Management%20Framework%205.0%20(%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D50395%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D%3C%2FA%3E)%20Checking%20the%20version%2C%20I'm%20already%20running%20version%205.1.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThey're%20now%20telling%20me%20to%20use%20Internet%20Explorer!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214756%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214756%22%20slang%3D%22en-US%22%3E%3CP%3EHi.%3C%2FP%3E%3CP%3EI%20wondering%20on%20how%20we%20can%20open%20the%20mail%20in%20the%20portal%20if%20we%20want%20to%20decrypt%20the%20attached%20documents.%20If%20we%20do%20send%20to%20an%20Office%20365%20customer%20or%20internal%20recipient%20with%20new%20Outlook%2C%20the%20inline%20function%20works.%20But%20then%20we%20are%20unable%20to%20decrypt%20the%20documents%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214252%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214252%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F162940%22%20target%3D%22_blank%22%3E%40Mark%20Galvin%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%20i%20am%20global%20admin.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20really%20hope%20its%20just%20a%20case%20of%20waiting%20for%20it%20roll%20out%20properly%20to%20our%20tenancy.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214251%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214251%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F156853%22%20target%3D%22_blank%22%3E%40P%20Roby%3C%2FA%3Eoh%20snap.%26nbsp%3B%20thats%20odd.%20I%20take%20you%20are%20a%20global%20admin%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214247%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214247%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F162940%22%20target%3D%22_blank%22%3E%40Mark%20Galvin%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F37394i2DC668C75B0045E5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22irm.JPG%22%20title%3D%22irm.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214242%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214242%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F156853%22%20target%3D%22_blank%22%3E%40P%20Roby%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20run%20'Get-IRMConfiguration'%20once%20connected%20what%20do%20you%20see%3F%20Once%20I%20have%20run%20the%20'%3CSPAN%3ESet-IRMConfiguration%20-DecryptAttachmentFromPortal%20%24true%3C%2FSPAN%3E'%20and%20then%20the%20'Get-IRMConfiguration'%20I%20get%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20977px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F37393iE6D6AC88D73F4A9B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%2210.JPG%22%20title%3D%2210.JPG%22%20%2F%3E%3C%2FSPAN%3EPlease%20post%20what%20you%20get.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethanks%3C%2FP%3E%3CP%3EMark%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214236%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214236%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F162940%22%20target%3D%22_blank%22%3E%40Mark%20Galvin%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%24UserCredential%20%3D%20Get-Credential%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%24Session%20%3D%20New-PSSession%20-ConfigurationName%20Microsoft.Exchange%20-ConnectionUri%20%3CA%20href%3D%22https%3A%2F%2Foutlook.office365.com%2Fpowershell-liveid%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foutlook.office365.com%2Fpowershell-liveid%2F%3C%2FA%3E%20-Credential%20%24UserCredential%20-Authentication%20Basic%20-AllowRedirection%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EImport-PSSession%20%24Session%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ESet-IRMConfiguration%20-DecryptAttachmentFromPortal%20%24true%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EOutput%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EA%20parameter%20cannot%20be%20found%20that%20matches%20parameter%20name%20'DecryptAttachmentFromPortal'.%3CBR%20%2F%3E%2B%20CategoryInfo%20%3A%20InvalidArgument%3A%20(%3A)%20%5BSet-IRMConfiguration%5D%2C%20ParameterBindingException%3CBR%20%2F%3E%2B%20FullyQualifiedErrorId%20%3A%20NamedParameterNotFound%2CSet-IRMConfiguration%3CBR%20%2F%3E%2B%20PSComputerName%20%3A%20outlook.office365.com%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-214230%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-214230%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F156853%22%20target%3D%22_blank%22%3E%40P%20Roby%3C%2FA%3E-%20what%20command%20are%20you%20waiting%20for%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3EMark%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213881%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213881%22%20slang%3D%22en-US%22%3E%3CP%3EStill%20Waiting%20for%20the%20command%20to%20be%20made%20available.%20I%20was%20promised%20end%20of%20June%20by%20support!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213351%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213351%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20sent%20a%20test%20email%20from%20Outlook%20(Office%20365%20E3)%20to%20my%20iCloud%20and%20another%20Office%20365%20(Business%20Premium)%20that%20I%20have.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EiCloud%20-%20works%20perfectly.%20I%20get%20the%20'%3CSTRONG%3EGalvin%2C%20Mark%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%3E(mark.galvin%40)%3C%2FA%3E%3CSPAN%3E%26nbsp%3Bhas%20sent%20you%20a%20protected%20message.'%20email%20and%20I%20get%20click%20the%20link%20to%20open%20the%20OME%20portal%20and%20get%20the%20one%20time%20pass%20code%20etc-%20cool.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EOther%20Office%20365%20account%20-%20when%20I%20double%20click%20that%20email%20in%20Outlook%20I%20get%20the%20'Sorry%2C%20something%20went%20wrong%20opening%20Information%20Rights%20Management%20protected%20content.%20The%20request%20is%20not%20supported.'%20error.%20Open%20OWA%20for%20that%20second%20account%20and%20in%20the%20message%20preview%20window%20I%20see%20the%20email%20and%20its%20attachment.%20Double%20click%20it%20and%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F37255iFBD3523EB571A074%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%225.JPG%22%20title%3D%225.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAny%20ideas%20here%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EMark%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213344%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213344%22%20slang%3D%22en-US%22%3E%3CP%3EManaged%20to%20get%20it%20to%20work%20although%20I'm%20not%20sure%20if%20it%20was%20this%20or%20just%20being%20patient!%20I%20sent%20a%20test%20email%20from%20OWA%20to%20an%20external%20account%20(which%20also%20has%20a%20redirect%20all%20incoming%20email%20back%20to%20my%20Office%20365%20account).%20when%20I%20tried%20to%20open%20that%20encrypted%20email%20I%20get%3A%3C%2FP%3E%3CP%3E---------------------------%3CBR%20%2F%3EMicrosoft%20Outlook%3CBR%20%2F%3E---------------------------%3CBR%20%2F%3ESorry%2C%20something%20went%20wrong%20opening%20Information%20Rights%20Management%20protected%20content.%20The%20request%20is%20not%20supported.%3CBR%20%2F%3E---------------------------%3CBR%20%2F%3EOK%3CBR%20%2F%3E---------------------------%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBefore%20that%20appeared%2C%20a%20box%20briefly%20appeared%20what%20looked%20like%20it%20was%20connecting%20to%20the%20server%20and%20then%20in%20a%20new%20email%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20444px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F37254iF960D95B3A03B188%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%224.JPG%22%20title%3D%224.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-213333%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-213333%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20news%20and%20I%20have%20run%20the%20PS%20command.%20Now%20external%20users%20can%20open%20attachments%20without%20being%20asked%20for%20any%20other%20account%20details.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20only%20using%20the%20two%20RMS%20Templates%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F37250iB61A96754B9B4481%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%221.jpg%22%20title%3D%221.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EThe%20above%20is%20from%20an%20ETR%2FMail%20Flow%20rule%20I%20setup%20to%20test.%20When%20I%20send%20attachment%20(Excel)%20to%20that%20non%20Office%20365%20email%20address%20I%20receive%20the%20email%20stating%20'Galvin%2C%20Mark%20(mark.galvin%40xxxxxxx.co.uk)%20has%20sent%20you%20a%20protected%20message.'.%20I%20have%20click%20the%20link%20and%20it%20opens%20in%20the%20OME%20Portal.%20I%20have%20then%20clicked%20the%20'request%20one-time%20passcode%20to%20view%20the%20message'%20(as%20I%20am%20testing%20this%20from%20the%20perspective%20of%20a%20user%20that%20does%20not%20have%20Office%20365%20or%20any%20other%20Microsoft%20account).%20Once%20the%20one%20time%20passcode%20arrives%20in%20my%20non%20Office%20365%20account%2C%20I%20copy%20the%20passcode%20and%20it%20opens%20the%20email%20in%20the%20OME%20portal.%20I%20then%20am%20able%20to%20download%20the%20Excel%20file%20and%20open%20without%20any%20issue.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUsing%20same%20Office%20365%20account%20I%20can%20use%20the%20'Protect'%20--%26gt%3B%20'Encrypt'%20option%20in%20OWA%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20738px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F37252i9B51D2A3691E76AF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222.JPG%22%20title%3D%222.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3ESame%20result%20as%20the%20ETR%2FMail%20Flow%20rule%20-%20perfect.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20we%20mainly%20use%20Outlook%202016%20ProPlus%20so%20I%20need%20that%20Encrypt%20option%20to%20appear%20in%20Outlook%20Desktop.%20I%20had%20read%20from%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FSecurity-Privacy-and-Compliance%2FEncrypt-only-rolling-out-starting-today-in-Office-365-Message%2Fba-p%2F162718%2Fpage%2F2%22%20target%3D%22_blank%22%3Ehere%20%3C%2FA%3Ethat%20we%20need%20to%20have%20at%20least%20the%201804%20build%2C%20so%20I%20have%20updated%20to%20the%201806%20version%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20544px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F37253i9F2FF663C346FF98%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%223.jpg%22%20title%3D%223.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERestarted%20Outlook%20and%20I%20do%20not%20see%20the%20Encrypt%20button%20anywhere.%20I%20have%20tried%20under%20'Options'%20then%20'Permissions'%20but%20just%20see%20the%20'Connect%20to%20Rights%20Management%20Server%20to%20get%20templates'%20and%20when%20I%20click%20on%20that%20nothing%20happens.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20installed%20the%20AIP%20Client%20(we%20have%20the%20Azure%20Information%20Protection%20Plan%201%20license%20on%20top%20of%20our%20E3%20license)%20but%20that%20only%20gives%20me%20any%20Labels%20setup%20in%20AIP%20Portal%20and%20not%20the%20Encrypt%20option.%20It%20does%20give%20me%20the%20Do%20Not%20Forward%20option%20but%20when%20I%20click%20on%20it%20it%20gives%20error.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20one%20know%20how%20to%20get%20working%20please%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethanks%3C%2FP%3E%3CP%3EMark%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-211353%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-211353%22%20slang%3D%22en-US%22%3E%3CP%3EAny%20restriction%20on%20the%20Office%20version%20to%20be%20able%20to%20open%20the%20decrypted%20attachment%3F%26nbsp%3B%20Such%20as%20Office%202010%20or%20older%3F%26nbsp%3B%20Currently%20working%20through%20an%20issue%20with%20a%20client%20that%20they%20are%20unable%20to%20open%20a%20word%20document.%26nbsp%3B%20Getting%20the%20message%20'You%20do%20not%20have%20credentials%20that%20allow%20you%20to%20open%20this%20document.%20You%20can%20request%20updated%20permission%20from%20*%40*.com.%20Do%20you%20want%20to%20request%20updated%20permission%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-207092%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-207092%22%20slang%3D%22en-US%22%3E%3CP%3EScoped%20RMS%20templates%20in%20ETRs%20is%20coming%20very%20soon.%20Though%20can't%20give%20a%20public%20eta%20yet.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-206056%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-206056%22%20slang%3D%22en-US%22%3EHi%20When%20will%20you%20add%20support%20for%20scoped%20RMS%20templates%20in%20Exchange%20transport%20rules%20%3F%20We%20cannot%20move%20to%20Azure%20based%20RMS%20due%20to%20that.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-205342%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-205342%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20is%20unexpected.%20If%20anyone%20else%20runs%20into%20this%20issue%2C%20they%20should%20open%20a%20support%20ticket.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-205341%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-205341%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20what%20I%20receive%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EA%20parameter%20cannot%20be%20found%20that%20matches%20parameter%20name%20'DecryptAttachmentFromPortal'.%2B%20CategoryInfo%20%3A%20InvalidArgument%3A%20(%3A)%20%5BSet-IRMConfiguration%5D%2C%20ParameterBindingException%2B%20FullyQualifiedErrorId%20%3A%20NamedParameterNotFound%2CSet-IRMConfiguration%2B%20PSComputerName%20%3A%20outlook.office365.com%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-205338%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-205338%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F156853%22%20target%3D%22_blank%22%3E%40P%20Roby%3C%2FA%3E%2C%20the%20feature%20is%20fully%20rolled%20out.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3Ca%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F620963%22%3E%40vamsi%3C%2Fa%3E%20the%20feature%20allows%20download%20without%20encryption%20from%20the%20OME%20portal%20for%20any%20recipient.%20It%20doesn't%20matter%20which%20identity%20forwarded%20the%20email%20to%20the%20recipient.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-205323%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-205323%22%20slang%3D%22en-US%22%3E%3CP%3EDesperately%20need%20this%20feature!%20When%20will%20it%20complete%20rollout%20to%20our%20tenancy%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-205082%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-205082%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20is%20a%20welcoming%20feature%2C%20but%20how%20reliable%20is%20it%2C%20we%20still%20have%20to%20test%20it%20out%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EComment%20edited%20to%20add%20the%20following%20sentence.%3C%2FP%3E%3CP%3EPlease%20make%20thing%20simple....Not%20powershell%20please.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-204141%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-204141%22%20slang%3D%22en-US%22%3E%3CP%3EIts%20a%20great%20announcement%20after%20Encrypt%20feature%2C%20appreciate%20your%20continuous%20efforts%20to%20make%20customers%20flexible%20to%20use%20'Encrypt'%20feature.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20couple%20of%20queries%20regarding%20this%2C%3C%2FP%3E%3CP%3E1.%20If%20a%20non-O365%20user%20forwards%20the%20email%20to%20O365%20user%20will%20the%20document%20remains%20encrypted%20for%20O365%20user%3F%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20If%20a%20O365%20user%20(who%20are%20not%20on%20the%20earlier%20version%20-%201804%20of%20Outlook)%20forwards%20the%20email%20to%20non-O365%20user%20from%20OME%20portal%2C%20will%20the%20attachment%20gets%20decrypted%20for%20non-O365%20users%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1619065%22%20slang%3D%22en-US%22%3ERe%3A%20Admin%20control%20for%20attachments%20now%20available%20in%20Office%20365%20Message%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1619065%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20stopped%20working%20for%20our%20tenant%20about%20two%20weeks%20ago.%20I%20have%20gone%20into%20PowerShell%20and%20checked%20the%20IRMConfiguration%20settings%20and%20DecryptAttachmentFromPortal%20and%20DecryptAttachmentForEncryptOnly%20are%20both%20set%20to%20True%2C%20but%20now%20all%20our%20Office%20document%20attachments%20are%20retaining%20the%20protection%20when%20downloaded%20using%20the%20Outlook%20desktop%20application.%20I've%20gone%20to%20our%20O365%20provider%20for%20help%20but%20so%20far%20they%20haven't%20been%20able%20to%20help%20us.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎May 11 2021 01:53 PM
Updated by: