Windows 10: Announcing Office 365 Advanced Message Encryption

Brink · Apr 30, 2019

A year and a half ago, we launched new Office 365 Message Encryption capabilities, and at the heart of these updates, we made it easier for users to collaborate on protected messages with anyone and on any device. These updates included empowering end users to apply encryption and read encrypted emails directly in Outlook, and also making it easier for non-Office 365 recipients to use their Google or Yahoo identities to authenticate and read encrypted messages.

Our goal continues to be to protect our customers’ sensitive data, by making it easier to apply and consume encrypted messages, regardless if your recipient is inside or outside your organization. Unfortunately, protecting and controlling sensitive data that’s shared outside your organization is more challenging than if it was shared inside your organization.

That’s why we are investing in capabilities that not only enhance encryption, but also provide more control over access to encrypted emails by external recipients.

Today, we are excited to share new Office 365 Advanced Message Encryption capabilities that enable admins to apply multiple custom email templates, and to expire and revoke encrypted emails accessed through the Office 365 web portal.

Read further to understand what’s available in Advanced Message Encryption.

Apply multiple custom email templates

Many organizations require custom email templates that reflect the unique brand, logo or text of the department or region the encrypted email came from. For example, a regional office in France may require that the email template that external recipients receive are in French.

With Advanced Message Encryption, customers can apply more than one custom email template. That means you can change, for example, the logo, color, text of email template. Today, this is done through a PowerShell cmdlet.

Once the template is created, in the Exchange admin center, you can create a mail flow rule that applies the template based on set conditions. For example, if the message contains the key word, such as ‘confidentiel’, the email will be automatically be applied with the desired encryption policy and custom template.

Expire access to encrypted emails

Another benefit to creating custom branded email template is the ability to set expiration date as an added option to the template.

This may be valuable for organizations that have compliance obligations that require you to restrict how long external recipients can access sensitive emails per organizational policies or regulatory requirements.

Admins can control sensitive emails shared outside the organization with automatic policies that can detect sensitive information types (e.g. PII, Financial or Health IDs) or keywords to enhance protection by expiring access through the Office 365 web portal to encrypted emails.

Once the custom email template is created in PowerShell with the desired expiration date, in the Exchange admin center, you can apply the template.

After the template is applied, the sender can send email normally, and if the email meets the conditions of the policy, the expiration date will be invoked.

From the perspective of the recipient, after the message is sent, they would see the branded template with the expiration date. Once the encrypted email has expired, the email will no longer be accessible through the Office 365 web portal.

Revoke access to encrypted emails

For organizations that collaborate and share sensitive emails with external recipients, we are also enabling the ability to revoke encrypted emails accessed through the Office 365 web portal.

Whether it’s due to malicious attack, accidental sharing of encrypted emails, or changes in who is authorized to view encrypted emails, admins can now go into the encryption report to find encrypted emails and revoke access through a new UI experience inside the Office 365 Security and Compliance Center.

Once the message is revoked, the external recipient no longer access the sensitive email through the Office 365 web portal.

Get started

Advanced Message Encryption is rolling out and will be available in eligible tenants by the end of May. Get started by leveraging the resources such as support documentation and interactive labs provided below.

Note, you must set up Office 365 Message Encryption to leverage Advanced Message Encryption capabilities, which provide added protection on top of encrypted messages shared externally. If you do not have Office 365 Message Encryption learn how to set it up here.

Office 365 Advanced Message Encryption requires an Office 365 E5 subscription or an Office 365 E3 subscription with the E5 Compliance add-on or Advanced Compliance add-on. If you don't have that plan and want to try Advanced Message Encryption, you can sign up for a trial of Office 365 Enterprise E5.

Resources

Documentation: coming soon
Interactive guide: Enhance protection with Advanced Message Encryption in Office 365
Click to expand...

Source: Announcing Office 365 Advanced Message Encryption - Microsoft Tech Community - 502440

:)

Brink · Apr 30, 2019

New updates to Office 365 Message Encryption

Last year at Ignite we announced several new capabilities that enabled users to more seamlessly collaborate securely with anyone. Since then, we’ve released further updates such as a new out of the box template called encrypt-only, and others that make it easier for consumer recipients to collaborate on encrypted messages.

CQR0cG_iEUc

We’re excited to share a few new updates to Office 365 Message Encryption that further enhances the recipient experience and also help IT Admins to proactively protect their organization's' sensitive data.

Please read further for more details.

Enhanced Recipient Experiences

Flexible controls for attachments for any recipient
To further support collaboration on protected emails with consumer recipients, Office 365 Message Encryption enables organizations to control whether attachments should also be encrypted when using the Encrypt-Only template. This means recipients have full permissions to share the attachment in the protected email. This was a key ask from customers to support scenarios in which the recipient of sensitive information should have full permissions to attachments, such as a patient receiving her lab results, or a bank customer receiving his financials.

This update is generally available today. Admins can enable this setting by running a Windows PowerShell cmdlet.

Connect to Exchange Online Using Remote PowerShell (see https://aka.ms/exopowershell)

Run the Set-OMEMessageRevocation cmdlet as follows: Set-IRMConfiguration -DecryptAttachmentForEncryptOnly $true

Customized branded emails
Last year we announced the capability for admins to customize their business-to-consumer emails (see Add your organization's brand to your encrypted messages). We are pleased to announce additional enhancements for customized branded emails:

The ability to create several branding templates that can be applied to business-to-consumer emails via an Exchange mail flow rule

The ability to always enforce a branded recipient experience, regardless of the recipient identity

The ability to revoke business-to-consumer emails. Please see below

These enhancements would allow organizations to improve the look and feel of their business-to-consumer emails, as well as improve its collaboration and protection capabilities. These are planned to be delivered by the end of the calendar year.

Protecting PDFs

Office 365 Message Encryption can encrypt and rights protect not only the email content but also the attachment. Previously, only Office attachments were encrypted. At the end of the calendar year we will enable users to encrypt and rights protect PDFs.

Proactively protect sensitive emails for IT Admins

Apply Office 365 Message Encryption through a DLP Policy

The unified DLP platform allows organizations to manage multiple workloads from a single management experience, reducing the time required to set up and maintain security and compliance within your organization. We are pleased to announce that unified DLP now has the ability to encrypt emails.To comply with business standards and industry regulations, organizations need to protect sensitive information and prevent inadvertent disclosure. Examples of sensitive information that you might want to prevent from leaking outside your organization include financial data or personally identifiable information (PII) such as credit card numbers, social security numbers, or health records. With a data loss prevention (DLP) policy in the Office 365 Security & Compliance Center, you can now identify, monitor, and automatically encrypt sensitive emails in Office 365.

Along with unified policy creation, we also provide a single location to view reports for your DLP policies across Exchange Online, SharePoint Online and OneDrive for Business. This makes it easier to understand the business impact of your DLP polices and uncover actions that violate policies across multiple workloads.

Reporting

To help organizations better manage and control sensitive emails, IT Admins can monitor and view reports on encrypted messages to proactively apply policies to sensitive emails based on observed patterns. This has been a key customer ask so that admins can monitor the impact of encrypted email in their tenant. This feature will be available in public preview.

During preview the following reporting capabilities will be available:

Breakdown of total encrypted message volume by encryption method such as encryption applied through ad-hoc end user controls or through an automatic policy such as an Exchange Mail Flow rule or a Unified DLP rule

Number of encrypted messages by volume and by encryption template such as Do Not Forward, Encrypt-Only, OME Previous (OMEv1), or custom encryption templates

Details for each encrypted email such as sender, recipient, encryption template, etc.

Ability to schedule reports and have them sent to admins by email

Report that shows breakdown of total encrypted message volume by top recipient domains

Reporting is now available in public preview and we welcome feedback. To access the report:

Sign-in to https://protection.office.com with admin credentials

Then go to this link: https://protection.office.com/?fligh...cryptionReport

Revocation

We are also releasing in public preview the ability for admins to revoke encrypted emails sent to consumer email accounts. Revocation of encrypted emails is only possible if the recipient received a link-based branded email experience for the encrypted email. If the recipient received a native inline experience in a supported Outlook client, then those emails cannot be revoked.

Organizations will have the ability to force a link-based experience regardless of the recipient identity. This way, all recipients will get a branded email with a link to the Office 365 Message Encryption portal where they will be able to read and reply to encrypted emails. All such encrypted emails will be revocable.

Once an email has been revoked, the recipient will get an error when trying to access the encrypted email through the Office 365 Message Encryption portal: “The message has been revoked by the sender.”

The admin can revoke encrypted emails by using a Windows PowerShell cmdlet.

Connect to Exchange Online Using Remote PowerShell (see https://aka.ms/exopowershell)

Run the Set-OMEMessageRevocation cmdlet as follows:

Set-OMEMessageRevocation -Revoke $true -MessageId "<messageId>"

Admins can find the MessageId from the aforementioned Message Encryption Report or from Message Trace in Security and Compliance Center.

If revocation is successful, the following result will be returned:

The encrypted email with subject “<subject>” and Message ID “<messageId>” was successfully revoked.

Get started!

If you haven’t used Office 365 Message Encryption, getting started is very easy. Office 365 Message Encryption is configured for all eligible Office 365 tenants. Create an Exchange Mail Flow rule or a Unified Data Loss Prevention policy to get started. Technical documentation is available here.

Office 365 Message Encryption is offered in Office 365 E3 and E5, or as an add-on. You can find the full list of where Office 365 Message Encryption is offered here.

Please let us know what you think here or give us your feedback on uservoice!
Click to expand...

Source: New updates to Office 365 Message Encryption - Microsoft Tech Community - 261771

Douglas Clelland · Apr 30, 2019

Cortana & Office 365 Integration

We are trying to integrate Cortana with our Office 365 subscription, but it never works. Here are the steps we have done:

Turned on Cortona in the Office 365 Admin portal

We are using Windows 10 1703 – connected Office 365 service to Cortana

Did the same on windows 10 mobile with no luck, Cortana says its connected to Office 365, but sees no data and we are getting zero errors

We went rough office 365 support first and tried all fo their suggestions, they kicked us over to Windows support which is currently closed.

We are on v1703 with all updates in place, it does not work on Windows 10 desktop or mobile

any ideas? I can give you all steps 365 support had us run through if that will be helpful

Thank you

Doug

freebird_9924 · Apr 30, 2019

office 365 vs office 2013

my Microsoft surface came with 1 month trial of ms office 365 , now it's expired.now I wanna know if I she subscribe to office 365 or uninstall it & install office 2013. what's the difference between both?

Windows 10: Announcing Office 365 Advanced Message Encryption

Announcing Office 365 Advanced Message Encryption

Announcing Office 365 Advanced Message Encryption

Announcing Office 365 Advanced Message Encryption

Announcing Office 365 Advanced Message Encryption - Similar Threads - Announcing Office 365

New enhancements to Office 365 Message Encryption

Announcing XLOOKUP for Excel in Office 365

New updates to Office 365 Message Encryption

Microsoft Announces Office Delve for Office 365

Announcing Customer Lockbox for Office 365

Announcing build 16.0.7341.2035 for Office 2016 and Office 365

Announcing build 16.0.7167.2060 for Office 2016 and Office 365

Announcing build 16.0.7167.2055 for Office 2016 and Office 365

Announcing build 16.0.7167.2047 for Office 2016 and Office 365

Users found this page by searching for:

xlookup release date