Help with Encrypting Emails in Outlook

Question

Hello,

I need some assistance with encrypting emails in Outlook, please. I've read numerous posts and articles from Microsoft Learn, but I'm still unsure about the best way to send confidential information via email.

I have a Microsoft account through my college and have downloaded the applications, so I am using the Outlook desktop version. When I compose an email and click "Options", I see a lock icon that allows me to encrypt emails, and this feature works correctly.

However, I'm facing issues with my work Outlook account. When I attempt to encrypt an email via OWA (Outlook Web App), there is no option for encryption. To address this, I downloaded the Microsoft apps from my work account onto a separate laptop from the one I use for my school account because I didn't want to have both versions (school and work) on the same laptop.

Here’s the problem: It seems that the encryption option is available on the desktop version of Outlook but not in OWA, forcing me to use the desktop Outlook. When I try to encrypt emails on my work account using the desktop version, I receive the error message: "Microsoft Outlook was not able to create a message with restricted permission."

Additionally, I asked a coworker to send an encrypted email, and she encountered two different error messages: "Connect to Right Management Servers and get templates," and "No logged-on Office users are configured for Information Rights Management (IRM)."

All our applications are Software as a Service (SaaS) and hosted in Microsoft 365. I believe all users should be able to encrypt emails or password-protect them.

I have three questions:

1. Why is there no option to encrypt in OWA? Is it because emails are already encrypted in transit by default via SSL/TLS? This is not End-to-end, just in transit.
2. Why can't I send encrypted emails from my work Outlook desktop while I can from my school Outlook desktop?
3. What is the best and most user-friendly way to email confidential information? Should I use the encrypt option, S/MIME, or do I need to set up public/private keys?

Thank you very much! As a temporary workaround, We have been using password-protected documents, but we need to start using end-to-end encryption when necessary.

Thank you,

Lee Manning

Answer 1

Your org has to be licensed and the feature has to be enabled:

https://learn.microsoft.com/en-us/purview/set-up-new-message-encryption-capabilities

Answer 2

Hi, @LM-5132

Thank you for posting your question in the Microsoft Q&A forum.

According to your description, you have encountered the problem that the encryption option in Outlook is not available.

First of all, regarding the problem of no encryption option in OWA. You can first use Exchange Online PowerShell to verify whether the tenant is correctly configured for Microsoft Purview Message Encryption. Use the command to check whether the Information Rights Management (IRM) feature is enabled in Outlook Web Edition.

Get-OwaMailboxPolicy | FL *IRMEnabled*

Regarding your second question, it is not possible to send encrypted emails from the work Outlook desktop. I agree with @Andy David - MVP's answer that your organization needs to obtain permission and enable the feature. The only prerequisite for using Microsoft Purview Message Encryption is that Azure Rights Management must be activated in the organization's tenant.

Regarding the question of whether you should use the encryption option S/MIME or set up public/private keys, S/MIME is a widely accepted method for sending digitally signed and encrypted messages. You can also choose to use various encryption technologies together.

Refer to: Resolve Microsoft Purview Message Encryption issues - Microsoft 365 | Microsoft Learn

Set up Microsoft Purview Message Encryption | Microsoft Learn

Best,

Jeanne