External people can't open files with Sensitivity Label encryption.
Question: What are the best practices for ensuring external users can open files encrypted with Sensitivity Labels? Hi all. I've been investigating proper setup of sensitivity labels in Purview, and the impact on user experience. The prerequisites are simple enough, creating and configuring the labels reasonably straightforward, and publishing them is a breeze. But using them appears to be a different matter! Everything is fine for labels that don't apply encryption (control access) or when used internally. However, the problems come when labels do apply encryption and information is sent externally. The result is that we apply a label to a document, attach that document to an email, and send it externally - and the recipient says they can't open it and they get an error that their email address is not in our directory. This is because due to the encryption, the external user needs to authenticate back to our tenant, and if they're not in our tenant they obviously can't do this so the files won't open. So, back to the question above. What's the easiest / most secure / best way to add any user we might share encrypted content with to our tenant. As I see it we have the following options: Users have to request Admins add the user as a Guest in our tenant before they send the content. Let's face it, they'll not do this and/or get frustrated. Users share encrypted content directly from SharePoint / OneDrive, rather than attaching it to emails (as that would automatically add the external person as a Guest in the tenant). This will be fine in some circumstances, but won't always be appropriate (when you want to send them a point-in-time version of a doc). With good SharePoint setup, site Owners would also have to approve the share before it gets sent which could delay things. Admins add all possible domains that encrypted content might be shared with to Entra B2B Direct Connect (so the external recipient doesn't have to be our tenant). This may not be practical as you often don't know who you'll need to share with and we work with hundreds of organisations. The bigger gotcha is that the external organisation would also have to configure Entra B2B Direct Connect. Admins default Entra B2B Direct Connect to 'Allow All'. This opens up a significant attack surface and also still requires any external organisation to configure Entra B2B Direct Connect as well. I really want to make this work, but it need to be as simple as possible for the end users sharing sensitive or confidential content. And all of the above options seem to have significant down-sides. I'm really hoping someone who uses Sensitivity Labels on a day-to-day basis can provide some help or advice to share their experiences. Thanks, Oz.
Office 365 Problems
Hello everyone, I have been experiencing the following problem since today: As soon as I try to open Excel, Word, Outlook, etc., they close again immediately. Online repair and reinstallation did not improve the situation. Some of my colleagues are experiencing the same problem. Background: We roll out updates at intervals. The users who were in the first interval are experiencing these problems. The update interval has been stopped, but unfortunately I can no longer undo the update. The following version is displayed: Version 2509 Build 16.0.19231.20138. The computers are running Windows 11 with the 24H2 update. Does anyone have the same problem or know a solution? Thanks in advance.
Has Your Organization Set Up a Viva Engage Community for Microsoft 365 Collaboration?
Hi everyone! As a trainer, I often get great questions during my Microsoft 365 sessions. While I share answers live, only the attendees benefit—leaving many others without that valuable info. I’ve already set up a Microsoft Learning Pathways SharePoint site as a resource, but I’m exploring ways to extend knowledge-sharing beyond the classroom.Has anyone created or participated in a Viva Engage community to share tips, answer questions, and collaborate around daily Microsoft 365 tools? I’d love to hear about your experiences, best practices, or ideas on how to maximize impact and reach across your organizations. Thanks in advance for sharing! Let’s empower everyone to get more from Microsoft 365.😃
Security Admin Center Tenant Allow/Block List Not Able to Block IPv4?
While using the Security Admin Center Tenant Allow/Block List we have been able to block specific email addresses and IPv6 IP addresses but are unable to block IPv4 IP addresses. We have tried both using the console and the CLI but have turned up unsuccessful both times when it comes to IPv4. A large majority of the phishing attempts that we encounter come from IPv4 addresses but we have been unable to block any of these. Will there ever be functionality for IPv4 within the Tenant Allow/Block list or is the only option to use conditional access policies? Also why is this enterprise tool only functional with IPv6 and without documentation stating that it does not work for IPv4?How to Resolve Common Microsoft Outlook Issues
Microsoft Outlook is a powerful email and productivity tool, but users may occasionally encounter issues such as login problems, syncing failures, or application crashes. This guide provides practical solutions to resolve common Outlook problems efficiently. https://dellenny.com/how-to-resolve-common-microsoft-outlook-issues/
Outlook group contact reappearing after removal
One of my users has an Outlook group with 15-20 contacts in it. A terminated user's email address refuses to be removed causing email bounce backs. When removed from the group and refreshed the contact reappears after changes were saved. Keep in mind that other contacts have been added and removed without issue. I have attempted to remove the user via desktop app and OWA. Cleared web cache, cookies, etc. Account has also been fully deleted from 365 at this point yet the contact remains. How do I banish this contact?I cannot add RSS feeds anymore in Outlook 2024
This worked before. I tried various RSS links, it is not the link, it loads fine in a web browser. I think it is related to the connectivity. I am using Outlook 2024 as part of Microsoft Office 2024 Home & Business with Google Workspace Sync for Outlook. This might be either due to this Google Sync, but my suspicion is that it is related something else preventing the connection being made because I can see in the Windows Event Viewer events like this: .NET Runtime version 4.0.30319.0 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 25344. Message ID: [0x2509]. Anyone know how can I enable tracing and debug this issue? Anyone knows what's causing this?Invited to external M365 group - how add to Outlook 365
Hi all, I have been invited to an M365 group from an external organisation. I have accepted the invitation. I can view the group via the link in the email. I expected the group to appear in Outlook 365 but it hasn't. Can I add the Group to Outlook manually, or at all? thanks j
