Data Protection Issues

Fix Microsoft Purview Sending RPMSG Attachments Instead of Portal Links

Phi Hung VoPhi Hung Vo Oct 10, 2026 868 views

Question details

Users expect to receive a one-time-code web portal link when receiving sensitivity-label encrypted emails, but are instead receiving RPMSG file attachments.

How to Fix Microsoft Purview Sending RPMSG Attachments Instead of Portal Links
Product
Microsoft Purview
Device & OS
not provided
Scenario
Sending or receiving emails protected by Microsoft Purview sensitivity-label encryption.
Observed behavior
The encryption system delivers an RPMSG encrypted attachment to the recipient rather than directing them to the expected one-time-code web portal.
Before you start

Verify whether the recipient is using an email client that natively supports Microsoft's encryption protocols, as the client type often dictates if an RPMSG file or a portal link is generated.

Solution 1Recommended

Consult the Microsoft Purview Community

Since this is a highly specific Microsoft Purview configuration behavior rather than a standard Exchange Online error, reaching out to Purview specialists is the most effective approach.

Microsoft Purview's encryption behavior depends heavily on tenant-level configurations and client compatibility. Because Exchange Online support cannot override Purview's sensitivity label behaviors, the specialized community is the best resource for enforcing portal-based encryption.

1
Visit the Microsoft Tech Community

Open your web browser and navigate to the official Microsoft Tech Community website.

2
Locate the Purview forum

Use the search bar to find the 'Microsoft Purview' hub or navigate through the 'Security & Compliance' forums.

3
Post your query

Create a new discussion asking specialists how to enforce portal-based encryption (one-time passcodes) for all sensitivity-label encrypted messages instead of delivering RPMSG files.

Consult the Microsoft Purview Community
Provide Configuration Details: When posting your question, be sure to include details about your current Office 365 Message Encryption (OME) setup and the email clients your recipients are using.
Free Microsoft Office alternative

Need a simpler way to handle secure documents? Try WPS Office

If Microsoft's complex encryption rules and compliance centers are slowing down your daily document productivity, consider switching to WPS Office. It provides a lightweight, highly compatible, and user-friendly experience for managing and securing your Word, Excel, and PDF files.

  1. 1. Download the Installer: Visit the official WPS website and click the free download button for your operating system.
  2. 2. Install WPS Office: Run the downloaded installer and follow the simple on-screen instructions to set up the software.
  3. 3. Secure your documents: Open your documents in WPS Office and use the built-in encryption feature to easily set passwords without relying on complex server-side rules.
Fully compatible with Microsoft Office formats including DOCX, XLSX, and PPTX.Lightweight installation with a clean, familiar user interface.Built-in PDF editor with robust, easy-to-use password protection features.Completely free for standard daily office tasks with no complex tenant configurations.
microsoft office alternative - wps office

Frequently Asked Questions

What is an RPMSG file?

An RPMSG file is a Restricted Permission Message created by Microsoft's Azure Information Protection. It contains encrypted email content and attachments that require specific authentication to open.

Why do some users get a portal link while others get an RPMSG file?

Microsoft 365 Message Encryption determines the delivery method based on the recipient's email client and organization setup. If the recipient's client doesn't support native decryption, the system usually falls back to delivering an RPMSG file or a portal link, depending on the sender's specific tenant configuration.

Can I open RPMSG files without Microsoft Outlook?

Opening RPMSG files generally requires an Azure Information Protection viewer or an email client that supports Microsoft's native encryption protocols. Standard third-party email clients cannot natively read these files without the specialized viewer.