Last Updated: September 19, 2024

ISSUE

When you attempt to apply a label with encryption to an email the label is not able to be clicked and selected. If a label is already applied and you try to change the label nothing happens.

This issue is only observed in Outlook Desktop. Applying labels with encryption for the other Office applications works as expected. 

This issue occurs in Outlook builds that use the new MIP SDK starting with Version 2402 Build 17328.20142.

STATUS: FIXED

The Outlook Team fixed a second bug that was causing the inability to apply labels with encryption. The fix is now available in the following channels and builds:  

Beta Channel:  Version 2409 (Build 18024.15010) Current Channel Preview:  Version 2409 (Build 18025.20000) Current Chanel:  Version 2408 (Build 17928.20144) Monthly Enterprise Channel:  Version 2407 (Build 17830.20210)

The first fix for this issue is now available in the following channels: Beta Channel Version 2407 (Build 17816.20000)  Current Channel Version 2407 (Build 17830.20000) Current Channel Version 2407 (Build 17830.20138)

If you have updated to the fixed build and are still unable to apply a label with encryption, make sure the following policy is not enabled. When this policy is enabled, you can only apply labels that do not have encryption.    

Prevent users from changing permissions on rights managed content (admx.help).

This policy can be found in multiple registry paths so please check them all.

Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\Cloud\Office\16.0\Outlook\DRM\ Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\office\16.0\common\DRM Computer\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\DRM\

Registry Hive

HKEY_CURRENT_USER

Registry Path

software\policies\microsoft\office\16.0\common\drm

Value Name

disablecreation

Value Type

REG_DWORD

Enabled Value

1

Disabled Value

0

To work around the issue, you can apply labels with encryption in either the Outlook web app or new Outlook which do not have this issue.  

If you need to test and verify the issue is related to the MIP SDK change, you can revert Office to the prior MSIPC functionality by setting a registry key. This registry key is not intended to be used for long-term deployment. If you set the registry key on a machine, add a reminder on your calendar to check back to the Known Issue to confirm the issue is fixed and remove the key. 

HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\DRM 

Name: PreferredRmsPackage 

Type: DWORD 

Value: 1 

Description: Setting this key will instruct Office Applications to prefer a specific RMS package when creating IRM licenses and keys. 0=NotSet, 1=MSIPC, 2=MIP

Additional Resources

Learn about sensitivity labels

Microsoft Purview Message encryption

More Resources

Icon Experts (brain, gears)

Ask the experts

Connect with experts, discuss the latest Outlook news and best practices, and read our blog.

Outlook Tech Community

Icon Community

Get help in the community

Ask a question and find solutions from Support Agents, MVPs, Engineers, and Outlook users.

Outlook Forum on Answers

Icon feature request (light bulb, idea)

Suggest a new feature

We love reading your suggestions and feedback! Share your thoughts. We're listening.

Find out how

See Also

Fixes or workarounds for recent issues in Outlook for PC

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.