Outlook (2010 SP2) and OWA (Exchange 2013 CU5) have different behavior when viewing a message secured with AD RMS.
I have enabled IRM successfully for internal use. Viewing secured messages via Outlook works as expected. The issue is when I view the message via OWA, I can see the body content. The content is not protected, only attachments are protected.
A message that is intended to be protected but without attachments can be viewed via OWA even if it has been set to expire. Viewing the same message in Outlook is prohibited, as it should be.
This seems like a bug since a user can get to secured content simply by using the web browser. Is there a way around this or is this by design for some reason?