Last Updated: October 8, 2024
ISSUE
When you attempt to apply a label with encryption to an email the label is not able to be clicked and selected. If a label is already applied and you try to change the label nothing happens.
This issue is only observed in Outlook Desktop. Applying labels with encryption for the other Office applications works as expected.
This issue occurs in Outlook builds that use the new MIP SDK starting with Version 2402 Build 17328.20142.
STATUS: FIXED
The Outlook Team fixed the issue that was causing the inability to apply labels with encryption. The fix is now available in the following channels and builds:
Beta Channel: Version 2409 (Build 18024.15010)
Current Channel Preview: Version 2409 (Build 18025.20000) Current Chanel: Version 2408 (Build 17928.20144) Monthly Enterprise Channel: Version 2407 (Build 17830.20210) Semi-Annual Enterprise Channel (Preview): Version 2408 (Build 17928.20156) Semi-Annual Enterprise Channel: Version 2408 (Build 17928.20156) - ETA January 14, 2025If you have updated to the fixed build and are still unable to apply a label with encryption, make sure the following policy is not enabled. When this policy is enabled, you can only apply labels that do not have encryption.
Prevent users from changing permissions on rights managed content (admx.help).
This policy can be found in multiple registry paths so please check them all.
Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\Cloud\Office\16.0\Outlook\DRM\
Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\office\16.0\common\DRM Computer\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\DRM\
Registry Hive |
HKEY_CURRENT_USER |
Registry Path |
software\policies\microsoft\office\16.0\common\drm |
Value Name |
disablecreation |
Value Type |
REG_DWORD |
Enabled Value |
1 |
Disabled Value |
0 |
To work around the issue, you can apply labels with encryption in either the Outlook web app or new Outlook which do not have this issue.
If you need to test and verify the issue is related to the MIP SDK change, you can revert Office to the prior MSIPC functionality by setting a registry key. This registry key is not intended to be used for long-term deployment. If you set the registry key on a machine, add a reminder on your calendar to check back to the Known Issue to confirm the issue is fixed and remove the key.
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\DRM
Name: PreferredRmsPackage
Type: DWORD
Value: 1
Description: Setting this key will instruct Office Applications to prefer a specific RMS package when creating IRM licenses and keys. 0=NotSet, 1=MSIPC, 2=MIP
Additional Resources
More Resources
Ask the experts
Connect with experts, discuss the latest Outlook news and best practices, and read our blog.
Get help in the community
Ask a question and find solutions from Support Agents, MVPs, Engineers, and Outlook users.
Suggest a new feature
We love reading your suggestions and feedback! Share your thoughts. We're listening.