On-Prem Users can't open encrypted Mails from Microsoft Purview Information Protection

Question

On-Prem Users can't open encrypted Mails from Microsoft Purview Information Protection

Dirk Stolle 0

Hi,

it is a hybrid deployment with Entra Connect in place. Some users are already in the cloud (Exhange Online) while some are still On-Prem.

I've set up Purview Information Protection to encrypt mails (also internal mails). Users (cloud and On-Prem) can encrypt mails. While cloud users can open and read encrypted mails like native mails, the On-Prem users can't. They receive a wrapped mail with a message.rpmsg attachment and a link to the enrypted mail portal. But when they click on it, they will be redirected to their On-Prem OWA. So they can't read or even open the encrypted mails. I've also implemented the MSIPC (connector) and the Exchange Server is listed as allowed server. What am I doing wrong, or is it just not possible for On-Prem users to read/open those mails? It is a hybrid deployment with Entra Connect in place. Some users are already in cloude (Exhange Online) while some are still On-Prem.

Thank you in advance for your support.

best regards

Dirk

Smaran Thoomu 21,325 Reputation points Microsoft External Staff

2025-02-24T11:46:21.3233333+00:00

Hi @Dirk Stolle It appears there is a known similar issue that might be causing this. I will consult with our Product team, who are actively working on a solution.

We are also collaborating with our internal team to find ways to prevent this from recurring. We will keep you informed of any updates.
AnnuKumari-MSFT 34,351 Reputation points Microsoft Employee

2025-02-25T14:00:01.7633333+00:00

Hi Dirk Stolle ,

I am checking with the internal team on the above issue. Will keep you posted regarding the update once I hear back . Thankyou
AnnuKumari-MSFT 34,351 Reputation points Microsoft Employee

2025-03-10T10:29:03.7933333+00:00

Hi Dirk Stolle ,

From the internal team I got the below information:

By design, the message is encrypted using a sensitivity label with 'Assign permissions' now, and only their domain is listed. Edit the label, and add the external address or domain.

Hope it resolves the issue. Thankyou
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

1 answer

Your answer

Smaran Thoomu 21,325 Reputation points Microsoft External Staff

2025-02-24T11:46:21.3233333+00:00

Hi @Dirk Stolle It appears there is a known similar issue that might be causing this. I will consult with our Product team, who are actively working on a solution.

We are also collaborating with our internal team to find ways to prevent this from recurring. We will keep you informed of any updates.
AnnuKumari-MSFT 34,351 Reputation points Microsoft Employee

2025-02-25T14:00:01.7633333+00:00

Hi Dirk Stolle ,

I am checking with the internal team on the above issue. Will keep you posted regarding the update once I hear back . Thankyou
AnnuKumari-MSFT 34,351 Reputation points Microsoft Employee

2025-03-10T10:29:03.7933333+00:00

Hi Dirk Stolle ,

From the internal team I got the below information:

By design, the message is encrypted using a sensitivity label with 'Assign permissions' now, and only their domain is listed. Edit the label, and add the external address or domain.

Hope it resolves the issue. Thankyou
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

AnnuKumari-MSFT 34,351 Microsoft Employee

Hi Dirk Stolle ,

From the internal team , we got the below information:

By Design, the message is encrypted using a sensitivity label with 'Assign permissions' now, and only their domain is listed . Edit the label, and add the external address or domain .

Hope it helps in resolving the issue. Thankyou

Share via

On-Prem Users can't open encrypted Mails from Microsoft Purview Information Protection

1 answer

Your answer