How to Configure Sensitivity Label Watermarking for Emails in Microsoft Outlook

Preventing unauthorized data leaks and accidental forwarding of sensitive corporate communications requires unmistakable visual cues. In Microsoft 365 environments, Microsoft Purview Information Protection allows organizations to classify emails with sensitivity labels. Beyond cryptographic encryption, sensitivity labels can automatically apply visual watermarks, dynamic headers, and footers across email messages in Microsoft Outlook, clearly signaling confidentiality to both senders and recipients.

Visual Markings Supported by Microsoft Purview

When creating or modifying sensitivity labels for Microsoft Outlook, administrators can configure three primary visual markings:

• Email Watermarks: Diagonal or horizontal semi-transparent text overlaid across the email body and printed drafts.
• Custom Headers: Bold text displayed at the top of the message body (e.g., RESTRICTED – DO NOT FORWARD).
• Custom Footers: Standardized legal compliance disclaimers or classification notices inserted at the bottom of the email.

Configuring Visual Markings in the Microsoft Purview Compliance Portal

To create or update a sensitivity label with automated markings:

1. Sign in to the Microsoft Purview compliance portal as a Compliance Administrator or Global Administrator.
2. In the left navigation menu, expand Information protection and select Labels.
3. Select an existing high-confidentiality label (e.g., Highly Confidential) and click Edit label, or click Create a label.
4. Under the Define the scope for this label page, ensure Items (Files & emails) is checked.
5. On the Choose protection settings for labeled items page, check the box for Apply visual markings.
6. Click Next to access the Visual markings configuration screen.

Customising Headers, Footers, and Watermark Content

In the Visual Markings settings page:

1. Toggle Apply a header to On:
   • In the Header text box, enter: CONFIDENTIAL - INTERNAL USE ONLY.
   • Configure font size (e.g., 10pt), text alignment (e.g., Center), and font colour (e.g., corporate navy or dark grey).
2. Toggle Apply a footer to On and enter your organization’s legal retention disclaimer.
3. Toggle Watermark to On (if available for document/email print previews) and specify the text string, orientation (Diagonal or Horizontal), and font size.
4. Click Next, proceed through policy assignment, and click Save.

Publishing the Label via Label Policy

Ensure the label is actively distributed to your user community:

1. Under Information protection > Label policies, edit your organization-wide policy (e.g., Global Publishing Policy).
2. Confirm your updated sensitivity label is included in the published list.
3. Optionally enforce mandatory labeling by checking Require users to apply a label to their emails and documents.
4. Save the policy. Note that policy changes may take up to 24 hours to replicate across global Outlook clients.

Verifying Markings in Microsoft Outlook

End users can test the visual markings in Outlook on the web, Windows, or Mac:

1. Compose a new email in Microsoft Outlook.
2. Click the Sensitivity button on the Message ribbon.
3. Select your configured Highly Confidential label.
4. Observe the message canvas: the standardized header and footer automatically populate within the message frame, and dynamic protections prevent unauthorized distribution.

Deploying sensitivity label watermarks and headers in Outlook provides continuous visual deterrence against compliance violations and establishes clear accountability across enterprise communications.