Sunday, February 10, 2008

Home /Do not forward /Email Security /IRM /Reply to All /Rights Management Server /Rights Management Service /RMS / Email Security – Outlook Forms and Right Management Service

Email Security – Outlook Forms and Right Management Service

As we all know we can use Right Management Service to protect sensitive information and keep internal information internal. You can read one of my Rights Management Service (RMS) article on the following location:

http://www.msexchange.org/Santhosh_Sivarajan/

Also, you can protect your email by using Outlook forms. We can disable "Forward" (same as "Do not forward" option in RMS), "Reply to All" etc options using outlook form instead of using Rights Management Service (RMS). In this article I will explain how we can easily protect an email using Microsoft outlook forms.

The following section explains the procedure of creating a custom outlook from to disable "Forward" and "Reply to All" options:

 

  1. Open Outlook ( I am using Outlook 2007 in this scenario)
  2. From Tools menu, select Forms and then click Design a Form option.
  3. In the Look In box, select Message form and then click Open.

 

image 

  1. Select Actions tab from the Untitled Message (Design) page.
  2. Double click the Reply to All option.

image

  1. In the Form Action Properties dialog box, clear the Enabled check box, and then click OK.

image

  1. Select Properties tab from the Untitled Message (Design) page.
  2. Select the Send form definition with item check box.

image

  1. Click OK on the dialog box
  2. On the Tools menu, select Publish Form As option.
  3. In the Look In box, select Personal Forms Library, enter the "No Reply All & Forward" as the form name and click Publish
  4. Close the design window. You don't have to save the changes.

The following section explains the procedure of using an outlook custom to protect your email:

  1. Open Outlook.
  2. From the Tools menu, select Forms, and then click Choose Form.
  3. In the Look In box, click Personal Forms Library.
  4. Select the "No Reply All & Forward" form, and then click Open.
  5. Compose a new message and click send

When the recipient opens this message, the Reply to All and Forward buttons will not be available (grayed out) as shown in the following screen shot:

image

Also, the CTRL+F, or clicking Reply on the Standard toolbar will not work.

As you can see simple Outlook forms can act as an Information Rights Management service to protect your sensitive information. But there are a few disadvantages of using Outlook forms.

  • Both the sender and recipient must be using Microsoft Office Outlook.
  • Recipients using Microsoft Outlook Express, Microsoft Windows Mail, Outlook Web Access or other applications are not protected by outlook forms. They will be able to use Forward and Reply to All options.
  • Custom forms are not secure as IRM
  • Unlike IRM, limited options are available with Outlook forms

Conclusion
Outlook forms can be used to protect your sensitive email if any other Rights Management service is not available. But clearly, Outlook forms are not a replacement for any type of Right Management Service!

If you have any questions or comments regarding this article, feel free to email me at santhosh@sivarajan.com.

SS

Santhosh Sivarajan

Microsoft MVP · Identity & Cybersecurity Architect

Santhosh has 30+ years of hands-on enterprise experience in Identity and Access Management, Microsoft Entra ID, Active Directory, Microsoft 365 and Zero Trust architecture. He is the author of two books on Windows Server and security, and leads consulting, assessments and training at SAG Business Group.

1 comments:

Post a Comment

Popular Posts
Workstation Trust Relationship Issue Issue: You receive the following error message, when you try to login to the domain.  The security database on the server does not have ... ADMT Service Account - Permission and Configuration The ADMT service account needs to have proper permission in source and target domains.  You don’t need to use 2 separate accounts.  You can ... My First Peek into Microsoft Exchange 2010 By Santhosh Sivarajan Before I really dive into Exchange 2010, I thought I would install and play with it first. I took some screen shots and notes during the ins... ObjectSID and Active Directory What is an objectSID in Active Directory? When a new object is created in Active Directory, Domain Controller assigns a unique value used ... AD Group Report - List Group Members in Active Directory–PowerShell Script Updated Script - http://portal.sivarajan.com/2011/10/search-ad-collect-local-admin-group.html Script #1 This script... Add Users to a Group–PowerShell Script Purpose – Add users to a group from an input file – PowerShell V2 Script.  Input file – Input file (Users.csv) contains samAccountName in... User Account Migration and Merging – Part I (ADMT) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM pre-creating user account ... User Account Migration and Merging – Part II (Quest Migration Manager) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM Pre-creating user account in... Delete Stale or Inactive Computer Accounts from Active Directory Here is an easy way to identify and delete inactive or stale computers in an Active Directory environment.  Using the dsquery command you c... Converting PowerShell (PS1) to EXE / Standalone Application As we know, there many applications available to convert a PowerShell file to a standalone executable file.  Based on my experience, PowerSh...