Skip to content
Setup FoundrySetup Foundry

Documentation

Protect document metadata for rights managed Office Open XML Files

This user-scoped policy setting controls whether Word, Excel, and PowerPoint encrypt metadata in Office Open XML files protected by Information Rights Management (IRM).

since 0.9.8.11

Purpose

Show registry keys (1)
  • HKCU\software\policies\microsoft\office\16.0\common\security\drmencryptproperty

This user-scoped policy setting controls whether Word, Excel, and PowerPoint encrypt metadata in Office Open XML files protected by Information Rights Management (IRM).

The policy is represented by a REG_DWORD value. A value of 1 makes the Office applications encrypt the metadata in applicable rights-managed files. A value of 0 prevents this metadata encryption. When the policy is not configured, the Office template documents the default behavior as leaving the associated metadata unencrypted.

Notes

Security

IRM encrypts document content and enforces usage restrictions, but without this setting its protection does not necessarily cover the file's metadata. Information such as the document author or hyperlink references stored in metadata can therefore remain visible to people who are not authorized to access the protected document content.

Enabling the setting brings this metadata under encryption. It does not alter IRM permissions, grant or revoke access, or apply IRM protection to a document by itself.

Possible side effects

Tools and document-management systems that collect, index, or display Office Open XML metadata might be unable to read the encrypted properties without the required decryption rights. Their metadata-related features can consequently be limited for affected files.

Notes

The setting applies only to Office Open XML files that are already protected by IRM. It does not affect other file types or documents without IRM protection.

The 16.0 registry branch is used by the administrative templates for Office 2016 and other Office releases based on the same policy version. The products supported by a particular template release are identified on the corresponding Microsoft download page.

Microsoft documentation

Microsoft Download Center: Administrative Template files (ADMX/ADML) for Microsoft Office

Microsoft Office Group Policy Overview

See also