Encryption mode for Information Rights Management (IRM)

Information

If you enable this policy setting, you can choose from two options for controlling the encryption mode that Excel, PowerPoint, Word, Visio, and Outlook applications use to protect content with Information Rights Management (IRM):
- Electronic Codebook (ECB) -- ECB mode is always used when applying IRM encryption.
- Cipher Block Chaining (CBC) -- CBC mode is always used when applying IRM encryption.
If you disable or don't configure this policy setting:
- For Microsoft 365 Apps (Version 2304 or later): Cipher Block Chaining (CBC) mode is used.
- For earlier Microsoft 365 Apps and Office LTSC 2021, 2019, and 2016: Electronic Codebook (ECB) mode is used.

Solution

Policy Path: Microsoft Office 2016\Security Settings
Policy Setting Name: Encryption mode for Information Rights Management (IRM)

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-m365-apps-for-enterprise-v2306/ba-p/3858702