How to Enable Microsoft Purview Message Encryption in Microsoft 365
Question details
Users need to enable Microsoft Purview Message Encryption in Microsoft 365 Business Premium when the Encrypt button is missing in Outlook.
- Product
- Microsoft 365 Business Premium
- Device & OS
- not provided
- Scenario
- Setting up email encryption for secure communication and compliance in a Microsoft 365 environment.
- Observed behavior
- The Encrypt button does not appear in Outlook, even though Azure Information Protection and email encryption are included in the Business Premium license.
Ensure you have administrative privileges for your Microsoft 365 tenant and are using Windows PowerShell (not PowerShell 7 or later), as the AIPService module requires the older Windows PowerShell environment.
Enable Azure Information Protection and Configure IRM via PowerShell
Use Windows PowerShell to activate the AIP service and configure Information Rights Management (IRM) for Exchange Online to restore the Encrypt button in Outlook.
In many Microsoft 365 Business Premium tenants, Azure Information Protection (AIP) is disabled by default or requires manual intervention via PowerShell. Following these steps will activate the necessary RMS templates and enable encryption policies across your organization.
Launch Windows PowerShell as an Administrator. Do not use PowerShell 7 or newer, as the AIPService module is not fully compatible with later versions.
Run 'Connect-AipService' to authenticate with your administrator credentials, then execute 'Enable-AipService' to activate Azure Information Protection if it is currently disabled.
Connect to Exchange Online PowerShell and run 'Set-IRMConfiguration -SimplifiedClientAccessEnabled $true' to enable Simplified Client Access for Rights Management.
Run 'Get-RMSTemplate' to ensure templates are available, then run 'Test-IRMConfiguration -Sender user@yourdomain.com -Recipient user@yourdomain.com' to verify the encryption setup is functioning properly.
Wait approximately 30 minutes for the settings to synchronize across Azure and Purview, then restart your Outlook client to check for the Encrypt button.
Use WPS Office for Secure Document Creation and Management
While Microsoft 365 offers robust enterprise email encryption, WPS Office provides a lightweight, free alternative for all your daily document, spreadsheet, and presentation needs with built-in document encryption and excellent Microsoft format compatibility.
- 1. Download WPS Office: Visit the official WPS Office website and click the Free Download button.
- 2. Install the Application: Run the installer and follow the on-screen instructions to set up WPS Office on your device.
- 3. Open and Protect Documents: Open any existing Microsoft Office file seamlessly and use the built-in encryption feature to password-protect your work.
Frequently Asked Questions
Why is the Encrypt button missing in Outlook for Microsoft 365 Business Premium?
The Encrypt button may be missing if Azure Information Protection (AIP) is disabled in your tenant, Information Rights Management (IRM) is not configured correctly, or recent policy changes have not fully synchronized (which can take up to 30 minutes).
Can I use PowerShell 7 to configure the AIPService module?
No. The AIPService module requires Windows PowerShell (usually version 5.1). Using PowerShell 7 or later will cause compatibility issues or failures when trying to connect and configure Azure Information Protection.
How do I know if my IRM configuration is working correctly?
You can verify your setup by running the 'Test-IRMConfiguration' cmdlet in Exchange Online PowerShell, sending a test message from and to a user within your tenant. A successful output indicates the configuration is active.
