none
Auditing Office 365 Message Encryption RRS feed

  • Question

  • Got asked by a user how we can determine if a particular message was encrypted or not as it exited our site. We have a Mail Flow rule that encrypts messages based on the body containing a certain text string, or if the user sets the message sensitivity to Confidential. System works fine we've tested it. But if we had to prove to someone that yes, their outbound message did in fact get encrypted, where would I look? Is there something in Message Trace that captures this? Or a separate log somewhere I can look at?

    Thanks.

    Wednesday, September 30, 2015 2:53 PM

Answers

  • Hey Robert!

    Have you tried looking under "Reports" in the Office 365 Admin Center (Not Exchance Online Admin Center)? On the Reports page, under the Rules category, there is a report called "Rule matches for mail". While this initially shows the number of messages that match a rule, you should be able to click on an individual message on the graph to view its details. I don't know if it will say anything like "THIS EMAIL WAS ENCRYPTED", but the report itself should prove that the message did trigger the encryption rule. I hope this helps!


    -Regards,

    Josh B. | MCSE: Communication; MCSA: Office 365

    Blog: http://blog.msucguy.com | View
 Josh Blalock's LinkedIn profileView Josh Blalock's profile

    Wednesday, September 30, 2015 5:53 PM

All replies

  • Hey Robert!

    Have you tried looking under "Reports" in the Office 365 Admin Center (Not Exchance Online Admin Center)? On the Reports page, under the Rules category, there is a report called "Rule matches for mail". While this initially shows the number of messages that match a rule, you should be able to click on an individual message on the graph to view its details. I don't know if it will say anything like "THIS EMAIL WAS ENCRYPTED", but the report itself should prove that the message did trigger the encryption rule. I hope this helps!


    -Regards,

    Josh B. | MCSE: Communication; MCSA: Office 365

    Blog: http://blog.msucguy.com | View
 Josh Blalock's LinkedIn profileView Josh Blalock's profile

    Wednesday, September 30, 2015 5:53 PM
  • Thanks so much. This is great. Had no idea you could drill into the charts to get reports like this. Thanks again.
    Tuesday, October 6, 2015 4:23 AM
  • My pleasure! Yeah, there is some pretty good reporting and analytics available in Office 365!

    -Regards,

    Josh B. | MCSE: Communication; MCSA: Office 365

    Blog: http://blog.msucguy.com | View
 Josh Blalock's LinkedIn profileView Josh Blalock's profile

    Tuesday, October 6, 2015 6:47 PM