Office Message Encryption - Recipient not able to open office attachments

GonWild 421 Reputation points
2020-09-15T13:31:31.05+00:00

Hello,
I'm testing the implementation of OME in our organization, and I have a question:

Sending a word/excel attachment in an encrypted email to a recipient with no Microsoft 365 subscription, results in recipient not able to open the file. The preview function in the browser for viewing the encrypted message is able to view the file, but downloading and trying to open/edit the file fails. Opening a excel file in XLS viewer or older local office version triggers RMS saying he doesn't have persmission to the document.

Is this by design, or am I doing something wrong? What are the requirements for sending OME encrypted office-file attachments to external recipients?

Microsoft Office Online Server
Microsoft Office Online Server
Microsoft on-premises server product that runs Office Online. Previously known as Office Web Apps Server.
579 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,327 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 94,366 Reputation points MVP
    2020-09-15T13:53:53.117+00:00

    This is by design, as protection is embedded in the file itself. If you want them to be able to download attachments in unencrypted form, use the configuration detailed here: https://techcommunity.microsoft.com/t5/microsoft-security-and/admin-control-for-attachments-now-available-in-office-365/ba-p/204007

    2 people found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Yuki Sun-MSFT 40,781 Reputation points
    2020-09-16T04:37:53.07+00:00

    Hi @GonWild ,

    As michev said, by default the attachments in an encrypted message remain protected when downloaded. To allow recipients to download Encrypt-only attachments without encryption, please refer to the article shared by michev:

    Set-IRMConfiguration - DecryptAttachmentForEncryptOnly $true  
    

    And here is another official link for your reference: To manage whether email attachments are decrypted on download from a web browser


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
    0 comments No comments