How do you resolve message wrapping that shows as attachment when transport rule is enabled for external email warning?

Dawn Rose 0 Reputation points
2023-03-02T16:56:43.9166667+00:00

Scenario:

  1. An email is created in Gmail that utilizes SMIME encryption certificates.
  2. Email is sent to an outlook user that has transport rule enabled for message to warn of external message receipt.
  3. Exchange executes rule to prepend the warning message to the sender email. This action appears to break the digital certification (the message is altered) In lieu of breaking the digital certification, the original message is changed to an attachment. The warning shows in the inbox message body and the actual email originally sent is an attachment.
  4. This is constrains user time and makes email searching pointless.

Is there a fix for this issue that I have seen many conversations on but no solutioning?

Exchange Online
Exchange Online

A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.

Outlook | Windows | Classic Outlook for Windows | For business

1 answer

Sort by: Most helpful
  1. Yuki Sun-MSFT 41,456 Reputation points Moderator
    2023-03-03T04:18:43.0466667+00:00

    Hi @Dawn Rose ,

    Exchange executes rule to prepend the warning message to the sender email. This action appears to break the digital certification (the message is altered) In lieu of breaking the digital certification, the original message is changed to an attachment. The warning shows in the inbox message body and the actual email originally sent is an attachment.

    As you may have noticed in some other conversations about the similar topics, this is actually a normal behavior.

    Digital certificates are intended to ensure the integrity of the message and it proves that the message body and attachments are not modified between the point of sending and arriving. While the disclaimer transport rule you used works by altering the message body, so it's expected that the digital certification is no longer valid, and the email is finally wrapped as an attachment. This is all by design.

    With the above being said, I'd like to recommend having a go by utilizing the External Email Warning Tag feature and see if it can be an alternative for your situation.

    Set-ExternalInOutlook –Enabled $true
    

    1

    From what I know, the new Outlook native callouts works by adding a new MAPI property called IsExternalSender to the email item, so seems like it won't affect the message body.
    More details:


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.