That backup system won’t be able to read encrypted emails by default – so unless you can get that working somehow, you will only have copies of emails that contain a link to the actual content that require the right access to get to the contents – not a true backup. You might be wondering why you’d want to turn these off, encryption and security is good right? You might not be ready for users to start using this yet for support reasons, you might have a different method of securing emails, or you might be using a 3rd party backup system. You could also completely disable Azure Information Protection, but that might cause you other problems if you want to use AIP in any way.

You can view/edit these by going to your Azure portal and looking under Azure Information Protection > Classifications > Labels.Īs you’ll see in the screenshot above, the two labels I mentioned are listed, and you can go into those and disable them if you don’t want them to appear for your users (there’s a toggle for ‘Enabled’ set to ‘On’, set that to ‘Off’). The ‘Tenant name – Confidential’ and ‘Tenant name – Confidential View Only’ are default AIP labels. In other scenarios they’ll need to click a button to log in and view the email via their browser. In some scenarios this works seamlessly, such as sending to an external user also using Exchange Online. That’s a giant topic in itself, but the one liner is that wherever you send an encrypted email to, needs to sign in to view the message. These options are actually using Azure Information Protection (AIP) to encrypt your email. Click To Run has another called ‘Encrypt-Only’ which I haven’t tested yet. This by default has three or four options, which seem to be dependent on the version of Outlook being run ( MSI vs CTR). On a new/reply email window in Outlook, under the ‘Options’ tab is a button called ‘Permission’ (which in the future based on the time of writing, is changing to be called ‘Security’).

No send button in outlook