Issue Summary:

For customers who have subscribed to DAC (Data Access Control) only and disabled the "Outlook Email Protection" feature, classification labels disappear from Outlook (as shown below) while remaining visible in other Office applications. This creates confusion as labels should be independent of protection functionality.



Symptoms:

  • Classification labels are not visible in Outlook after disabling "Outlook Email Protection" in the root portal >> Configuration >> Feature configuration
  • Labels work normally in Word, Excel, PowerPoint, and other Office applications
  • Customer expects labels to function independently since they purchased DAC separately

Root Cause:

There is an unexpected dependency between the "Outlook Email Protection" feature configuration and classification label visibility in Outlook, even though these should be independent functionalities for DAC-only subscriptions.

Customer Impact:

  • Functional Impact: Loss of classification capability in Outlook only
  • Business Impact: Customers cannot classify emails according to their data governance policies
  • Policy Management Risk: Users may see "Seclore it" button (protection feature) if the admin enabled "Outlook Email Protection" as a workaround



Workaround: Enable Feature and Disable Protection Plugin

To restore classification label functionality in Outlook for DAC-only customers while preventing exposure to protection features:

Step 1: Enable Outlook Email Protection Feature

  1. Enable "Outlook Email Protection" in the feature configurations on the Policy Server
  2. Reinitiate the policy server container (run the following script)
  3. Ensure policies are properly assigned and published to users to avoid "Seclore it" button appearance
/opt/seclore/policyserver1/policyserver/start.sh

        After these steps, classification labels will appear normally if user has a policy assigned and published to his machine. Otherwise, if the publishing policy and labels are not published to the user for any reason, he will still see "Seclore it" in Outlook.



Step 2: Disable Protection Plugin via GPO


To ensure that users of a customer who subscribed to DAC only will not see "Seclore it" button in Outlook or Office apps at any circumstances, follow this article to disable Protection plugin via GPO:

Helpdesk : Seclore