Encryption with Outlook 2003

[Mark Cooper]

Whenever I try to encrypt a message with s/mime option. I recieve a pop
erro that says "Out of memory, close some windows and try again" I would
like to be able to send a message to other users in our exchange server and
have them encrypted. What should I be doing?

Thanks in advanced for your efforts,
Mark Cooper

 

[Mark Cooper]

Alice,
You are correct that did fix the problem. I did the repair and then it
allowed me to actually encrypt. However I didn't notice the encrypt button
yesterday on the tool bar when I was ready to send. That is the only way I
could send it. I think that only encrypts the message during its transfer.
I was loooking for something that encrypts it so only the user that is meant
to read it can read it.

Thanks,
Mark Cooper

 

[Brian Tillman]

You are correct that did fix the problem. I did the repair and then
it allowed me to actually encrypt. However I didn't notice the
encrypt button yesterday on the tool bar when I was ready to send. That is
the only way I could send it. I think that only encrypts the
message during its transfer. I was loooking for something that
encrypts it so only the user that is meant to read it can read it.

Outlook encrypts before the transfer and it uses the public keys of the
various recipients to form encrypted messages only the recipients can
decrypt.

 

[Mark Cooper]

Brian,
Thanks for the feedback. Does it saty encrypted to only allow the
authenticated user of the mailbox view it or can Exchange administrators
view it as well from any inbox?

- Mark Cooper

 

[Brian Tillman]

Thanks for the feedback. Does it saty encrypted to only allow the
authenticated user of the mailbox view it or can Exchange
administrators view it as well from any inbox?

It's encrypted with the public key of the recipient. Only the recipient has
the private key with which to decrypt it.

 

[Mark Cooper]

Brian - Alice
I appreciate all of your help with this but I wanted to confirm before
replying. I sent an email to one of the users in my Exchange domain. I
encrypted the message with s/mime, I checked with the exchange administrator
to see if he could read the message in this persons inbox. He was able to
do so. With his account he was able to Open other users folder, select
inbox, and then read the message. I don't think Outlook or Exchange have a
way to keep this from happening. Is a third party encryption needed to make
this scenario work?

Thank you both for all your time on this,
Mark Cooper

 

[Brian Tillman]

I sent an email to one of the users in my Exchange domain.
I encrypted the message with s/mime, I checked with the exchange
administrator to see if he could read the message in this persons
inbox. He was able to do so. With his account he was able to Open
other users folder, select inbox, and then read the message.

I'm not sure how this would be possible because certificates (as we use then
where I work) are stored not in Exchange. I believe they are stored in
%AppData%\Microsoft\Crypto, which is unique to each user.