Jan 10 2019
- last edited on
Feb 19 2021
We seem to be having an issue with the Office 365 Office Message Encryption (OME) for a couple of customers. They are properly licensed with Business Premium and AIP Plan 1 and have the latest version of the Office desktop (1812.11126.20196). The button has just disappeared. Recently, it's been upgraded from the previous envelope with red circle to the new lock icon. Yesterday, it is now either grayed out or the tab has completely been removed from the "New" message window in the "Options" section. It was working fine the day before. Not sure if this is related to the recent update of the Office client, but other customers with the same set up are not experiencing this issue. The current affected customers still have the ability to use OWA to use the Protect/Encrypt button or mail flow rules I created for a work around.
I have also tried using the Online Repair option, new Outlook profile, and uninstall and reinstall. These do not resolved the issue. Also, they do not have the AIP client software installed. I have not checked this out yet, has the other customers with the same licensing and set up or working as expected.
Mar 06 2019 12:14 PM
I have the same issue. Latest version of Outlook too and on business premium as well as p2 license for Security. Shows up for others but not for me and im the admin. One hint though, is I noticed if you go log into office365 then go to Subscriptions area (https://portal.office.com/account/) mine says Business Essentials which is what I used to be on. Not on that now. I suspect that's the issue.
Mar 07 2019 05:40 AM
More than likely you have both subscriptions added to your user, Business Essentials and Business Premium. Remove Business Essentials and then check to make sure that all services are turned on under the Business Premium license. If you had Business Essentials prior, you must have gotten your Office install from some other means. Office 365 Home and Student does not support the feature in Outlook. Check your version of Office.
Mar 07 2019 06:50 AM
I have the encrypt button now. As it turns out similar to what you said, my version of Office was wrong. I didnt realize it has to be version you download from office365.com in order to work or at least in order to work with the least hassle. The version I had was an volume license install.
Now that the encrypt button is showing and I can send encrypted emails to internal recipients just fine, when I send to external receipts using the "Encrypt Only" selection, the recipient (my gmail account for testing purposes) gets the email, gets the encrypted attachment but has now way to open the attachment. What I was expecting was for the email the recipient gets to include directions on how to use a one-time passcode to read the encrypted email.
I have a ticket open with Microsoft on this, did screen step recording and sent to them but been waiting on a reply. Thanks for your help.
Nov 14 2019 01:25 PM
Did you receive a resolution for this issue? I'm running into this for a customer who when they send out the encrypted email, it has no body. The attachment will open fine in outlook, but nothing will open in google. It's like it's missing the body of the message.
Apr 23 2020 05:27 PM
@crankinadmiralI'll have to give this a try...we use a volume license version as well and the encrypt button is there for everyone except this one user. Though it could also be because that user is also the only one still running a VM...
Apr 24 2020 04:59 AM
Enable Google and one time passcode. Use PowerShell to check the OME settings.
Jul 22 2020 08:51 PM
@Alex MelchingI found this issue to be due to licensing. after trying to troubleshoot why some of my users had the encrypt button in their outlook while others did not, a quick note from Microsoft confirmed what was an oversight. even though you can activate and enable OME for OWA for all users, to do so with those using local outlook client, they must have at least an E3 license assigned to them.
Note: Microsoft 365 Message Encryption is part of the Office 365 Enterprise E3 license. Additionally, the Encrypt-Only feature (the option under the Encrypt button) is only enabled for subscribers (Microsoft 365 Apps for enterprise users) that also use Exchange Online.
this note is under the section “Encrypt with Microsoft 365 Message Encryption"
Jul 23 2020 04:32 AM
Hello, that is absolutely not true. You do NOT need to have an Enterprise level license or subscription, but you do need supporting licenses and/or add-ons. When I started this post, that was the cause of the issue because after an update only Enterprise licensing (and O365 ProPlus) offered the Encrypt button and was quickly corrected when many SMB (with supporting licenses) users reported the issue as well. Supporting licenses: https://docs.microsoft.com/en-us/microsoft-365/compliance/ome-faq?view=o365-worldwide#what-subscript...
Newer tenants also have certain OME and IRM settings already enabled where as older tenants that may have not used OME before do not have turned on and you should go through the OME and IRM settings and enable newer features if necessary. https://docs.microsoft.com/en-us/microsoft-365/compliance/manage-office-365-message-encryption?view=...
The page you reference does not have updated information.
Jul 23 2020 04:39 AM
Nov 27 2020 01:55 AM
@Alex Melching First you have to have correct license. If the encrypt options button is not listed, go to Outlook trust center, email protection settings and put enable Encrypt emails. After that, there should be encrypt options visible in outlook.
Nov 27 2020 05:24 AM
Mar 04 2021 11:15 AM - edited Mar 04 2021 11:16 AM
I'm going through this ordeal now. I've talk to MS reps dozens of times. I've gotten so many different answers I'm about sick. We wanted keyword encryption via exchange rule, on demand- keyword and encrypt button, and policy based.
First We were told Azure information protection is what we need. Then I was told Information protection and governance was the license I needed. Then I was told I need both. All along this ride I tested and tested. NOW, the encrypt button won't show in Outlook desktop, shows in OWA, and they tell me that I need E5. It's utter garbage... The outlook desktop encrypt button randomly shows up now. When it does it works. They tell me it must be a bug. They say with my Business standard license the office applications I have is under MS 365 Business apps version, while the encrypt button comes with the MS 365 Enterprise apps(proplus).
Two weeks it too me to get this information and now I have an encrypt button that works, when it shows up, but you have no way of knowing when it's going to pop up. The keyword encryption and policy based via DLP policy works fine.
I call BS.
Mar 04 2021 12:14 PM
@rdiddy I've never had any issues (after much frustration) when support finally figured out that I needed to install a MS program add-on of sorts in order to fix this encrypt button issue. We use Office365 and our versions of Outlook come right from our subscription so you'd think it would already have everything built into Outlook especially since we're always running the latest versions of outlook to make the encrypt button work and work at all times, but it does not..at least not for us. I also found out that it makes it a tad harder if you have more than 1 Inbox in set up in Outlook as you need a license for each email account you intend to send encrypted emails. Employees will forget or simply not understand that they need to make sure they are using only 1 FROM address when encrypting so we had to resort to just paying for a license for any & all email addresses the employee uses so as to avoid this problem.
Before you try installing anything here is the licenses we use that I know works. Apply the same to a user and test...maybe you'll get lucky and it will just work.
Azure Information Protection Premium P2
Microsoft 365 Business Standard
Mar 04 2021 12:31 PM - edited Mar 04 2021 12:32 PM
I started with almost exactly what you have. Policy based encryption would not work. The encryption button did show up and was working when I had that license. Though I'm not sure if it would have stayed. MS claims it won't. P2 does not even show as an available service when I search. Also both p1 and p2 show office 365 message encryption as part of that service. I don't know what is what at this point. I know have the below:
Microsoft 365 Business Standard
Azure Information Protection Premium p1
Microsoft 365 E5 Information Protection and Governance
Mar 04 2021 12:38 PM
@rdiddy P1 (what you have) is even better than P2 & based on what you said, you do have all the correct licenses. You might want to pay extra for MS premier support. You could always downgrade your support after you're all fixed up if you dont want to keep paying it. They are much better IMO than standard MS support.
Mar 04 2021 12:57 PM
Mar 04 2021 01:01 PM
Mar 05 2021 04:53 AM
@crankinadmiral No I don't believe so. My testing is limited to my user. I have installs at home and work that i'm testing. I did notice some differences I found interesting. Work outlook showed version 2102 build 13801.20266 (current channel) and Home showed version 2102 build 13801.20274 click to run current channel (preview). The home computer encrypt button is stable and working. The Work encrypt button is the one not showing, showing, random. I re-installed office on that computer and the Encrypt button is now showing. Not sure if it's temporary or not but it was worth a try. No idea why the two computers show up to date yet still show differences in versions/channel.