Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.


Assume that you assign full access permissions to a delegate in a Microsoft Exchange Server 2010 environment. The delegate logs on to your mailbox by using Microsoft Outlook Web App. In this situation, the delegate can access your Active Directory Rights Management Services (AD RMS) protected messages unexpectedly.


This issue occurs because Outlook Web App lets a delegate view an RMS protected message from a mailbox if the logged-on delegate has full permissions on that mailbox.

Note Delegates cannot view an RMS protected message in Outlook.


To resolve this issue, install the following update rollup:

2891587 Description of Update Rollup 3 for Exchange Server 2010 Service Pack 3


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about how to enable explicit sign-in in Outlook Web App, go to the following Microsoft website:

How to enable explicit sign-in in Outlook Web AppFor more information about AD RMS, go to the following Microsoft website:

General information about AD RMS

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!