Microsoft 365 Encrypted Email (OME) Implementation

It is a fixed-scope IT Partner implementation service that enables Microsoft Purview Message Encryption — the current Microsoft service that replaced Office 365 Message Encryption (OME) — in your Microsoft 365 tenant and configures the Exchange Online mail flow rules that define the conditions for encryption. The service is $525 per project.

The service includes enabling and validating Microsoft Purview Message Encryption in Microsoft 365, creating mail flow rules that define the conditions for encryption, configuring customer-managed key (BYOK) settings if needed, verifying email encryption with internal and external test recipients, and providing a Project Closeout Report with final status, evidence of meeting acceptance criteria, outstanding issues if any, and final budget.

The implementation is delivered in about 3 hours of scheduled work. It follows a defined plan: kickoff, a pre-implementation system health check, configuration of the message encryption capabilities, Exchange Online mail flow rule setup, encryption verification, and closeout.

Microsoft Purview Message Encryption is the current Microsoft 365 email encryption service; it replaced Office 365 Message Encryption (OME), which Microsoft deprecated. It uses the rights-management protection in Microsoft Purview, so users can send and receive protected messages with other Microsoft 365 organizations and with recipients using Outlook.com, Gmail, and other email services.

Yes. Users can send and receive protected messages with other Microsoft 365 organizations as well as with recipients on Outlook.com, Gmail, and other email services. Recipients can read and reply to protected messages on any device without installing client software.

IT Partner creates Exchange Online mail flow rules that define the conditions for encryption. Messages that meet the configured conditions — for example, a keyword, a sensitive-content match, or a specific recipient domain — are automatically protected according to those rules. Users can also apply encryption ad hoc where the agreed configuration allows it.

Microsoft Purview Message Encryption is included in plans such as Office 365 E3 and E5, Microsoft 365 E3 and E5, Microsoft 365 Business Premium, Office 365 A1, A3, and A5, and Office 365 G3 and G5; some other plans can add the capability through Microsoft Purview add-on licensing. Each user protected by message encryption must be licensed — confirm entitlements against Microsoft's current Exchange Online service description.

Global Administrator or equivalent delegated administrative access to your Microsoft 365 tenant, with Exchange Online licenses in place for in-scope users. The exact access model is confirmed with IT Partner before work begins.

The client provides a dedicated point of contact and coordinates outside vendor resources and schedules if needed. The client is also responsible for configuring networking equipment such as load balancers, routers, firewalls, and switches, and for tuning email software on client workstations if Microsoft Outlook or other desktop email clients are used for connectivity to Microsoft 365.

No. Mail migration services to Microsoft 365 and AD and Group Policy settings are outside the scope of this project and would be additional cost items if needed.

No planned downtime is required — the work configures Microsoft Purview Message Encryption and Exchange Online mail flow rules alongside normal mail flow. Rule conditions are reviewed against existing transport rules, and encryption behavior is verified with test recipients before closeout.

IT Partner reviews the results with your point of contact, summarizes the configured rules and validation evidence, and provides a Project Closeout Report indicating final project status, evidence of meeting acceptance criteria, outstanding issues if any, and final budget. More extensive documentation can be provided for an additional fee.