You’ll need PowerShell for all of the configurations from here on out. Check that AIP is workingīefore we try to configure anything, let’s take a moment to make sure that it’s working correctly. You can move straight into configuration. For tenants created after February 2018Īzure Information Protection should be enabled by default so you won’t need to turn it on. It should take effect immediately but you might want to wait 30 minutes just to be sure. Click on Azure Information Protection and enable it. Go to the admin portal/ Settings/Services and add-ons. For tenants not previously configured for email encryption Don’t forget to turn it back on 30 minutes later. Click on Azure information protection and disable it. To do that, go to the admin portal/ Settings/Services and add-ons. This will make sure that your tenant gets switched over to the new version. After that disable encryption, wait 30 minutes then reenable it. I like to start from a clean slate, so for this reason, I’m going to recommend that you remove any encryption rules you previously created from Exchange. What follows is a step-by-step guide for completely configuring or reconfiguring email encryption in your Office 365 tenant. However, while simplifying the email encryption process for users, they’ve added to the workload of administrators because you need to set up your email encryption again to use the new version. And they’ve even made the third-party authentication easier to use too. Messages can be encrypted between internal users too.

If they send a reply it will again be encrypted automatically. It is decrypted for viewing automatically. And when a reply is made to the email, the original sender does not have to do anything to open that reply. Instead, they will click on the link in the body of the email. Reading an encrypted message no longer requires the person receiving it to open an attachment. In doing so, they also simplified the process for users. Recently, Microsoft moved email encryption into Azure but instead of being called Office 365 email encryption, it’s now Azure Information Protection (AIP). So much information gets sent via email - corporate secrets like specifications, private content like pretty much anything from your accountant or lawyer, or maybe just something you’d like to keep between you and the recipient. The ability to encrypt email is a critical feature.

Microsoft secure email powershell