Exchange auto-labeling policy now supports replacing manual label and encrypting email received from any organization

Exchange auto-labeling policies can protect mail in transit by applying sensitivity labels to mail received from inside or outside the organization that are not manually labeled. Currently, encryption can only be applied to unencrypted mail received from inside the organization. We are now adding the capability to configure policies that can apply encryption to mail received from outside the organization. In addition, policies can be configured to replace a label even if mail already has a manual label applied, provided the label priority on the mail is lower or same.

This message is associated with Microsoft 365 Roadmap ID 85668.

When this will happen:

Rollout will begin in mid-February and is expected to be complete by early March.

How this will affect your organization:

In order to protect mail with sensitive content as soon as it is introduced to the organization, if an external customer or partner starts a conversation that the receiving organization considers sensitive, auto-labeling can protect the mail with encryption when the mail arrives in the recipient’s mailbox. With this new feature, admins can create policies by designating a Rights Management owner to allow encryption on the receiving mail.

Additionally, to ensure certain sensitive content in mail remains in compliance with organization policies, auto-labeling can enforce classification with a label regardless of whether a user has manually labeled a mail with lower classification. By default, manually labeled mail cannot be overwritten by auto-labeling. With this new feature, admins can create policies that evaluate label applications solely comparing label priority of the existing and new label to be applied.

Create policiesView image in new tab

What you need to do to prepare:

To access, go to Microsoft 365 compliance center > Information Protection > Auto-labeling list view. Here, you can create an auto-labeling policy and select a sensitivity label with encryption, then setup the additional policy settings.

Information protectionView image in new tabLearn more:

Message ID: MC316412


No comments yet

Leave a Reply


I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

%d bloggers like this: