Sending Encrypted Emails to External Users from O365

[bheadon]

We had a request from one of our users that wanted to send encrypted emails to external people related to Child Protection issues etc. She was advised at a course that she should pay for a service to do this, but we noticed that it is a free offering for schools on Office 365 (we are on the free E1 licence).

 

It took a few steps and calls to Microsoft to get it set up, so I thought I would share a rough user guide in case it helped anyone? It has been cobbled together from a couple of Microsoft Technical Guides and my own experience from setting it up. Hopefully it will be of help!

 

O365 Email Ecryption for Schools.pdf

[The_IT_Guy]

Exactly what i was after. Thanks

[dezt]

Amazing, I was after this exact thing, thanks so much.

[mrforgetful]

Wow, thank you for this, have been looking at installing encryption certificates for months and debating whether the work was worth it. This is a much better solution and works good.

[apearson]

Thank you. And extremely useful guide. I might be missing something, but it would seem that this can only be used if the recipient has a Microsoft account.

Is that correct?

[Steve21]

Thank you. And extremely useful guide. I might be missing something, but it would seem that this can only be used if the recipient has a Microsoft account.

Is that correct?

 

It can send to any email account, but you need a Microsoft account to login to it.

 

However there are options for one-time passcode now, instead of requiring a Microsoft login.

 

Steve

[apearson]

Great. I'm in the middle of setting it up so look forward to trying it.

Thanks.

[Liam]

Works for me perfectly I did it myself about 6 months back. You would be amazed at how many phone calls I get from our staff saying their recipient couldn't open it.. My reply is.. Do you mean they can't follow simple onscreen instructions. It's really self explanatory even for those who need to use a one time passcode. I did mind based on contents of the subject box. If they type secure , encrypted or confidential it send its encrypted.

[mikkydoos]

Awesome post. Big thanks.

[speckytecky]

Just found this @bheadon thanks very much.

[protocol]

Thanks for this as been asked this week to do such a thing here but I have two questions:

 

1) How do I check what Office 365 licence we currently have?

2) Step 2 b doesn't appear for me. I only have Azure Rights Management Premium which isn't free.

 

Any help will be much appreciated.

[MYK-IT]

Thanks @bheadon for detailed instructions...works a treat!

 

and Thanks @protocol for topic, as I missed it when originally posted.

[Marshall_IT]

I wrote a blog on here a couple of years ago covering the same topic. Office 365 E-mail Encryption - Blogs - EduGeek.net

 

I have it set to look for ENCRYPT in the subject, i have also added a rule to detect UPNs in the body of an email and encrypt those too (although i am getting a few false positives at the moment, i think it's related to the Office 365 mail server names)

 

One thing i'd add to your instructions is to create a rule to automatically decrypt incoming e-mail as the recipient of an encrypted e-mail can reply and have that e-mail encrypted too.

This makes the whole process a lot more seamless for your staff.

 

Edited June 15, 2016 by Marshall_IT

[nathan]

We set ours up at the beginning of the year, but we trigger it via Encrypt: in the subject

[MYK-IT]

FYI

https://blogs.technet.microsoft.com/compilations/2014/04/29/office-365-message-encryption-decryption-steps-for-purchase-configuration-branding-and-use-everything-you-need-to-know/