Custom branding templates are configured for Microsoft Purview Message Encryption

Overview

When an organization doesn’t use custom branding templates, people outside the company who receive encrypted messages could see a generic Microsoft‑branded portal. Because the portal doesn’t reflect the organization’s identity, recipients can be less confident about where the message came from.

Custom branding templates let organizations add their logo, colors, disclaimers, and contact details to the portal. These elements help the portal look familiar to recipients and can support trust when they view and interact with encrypted messages.

Remediation

• Add your organization’s brand to your encrypted messages

Run it

The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:

Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn

Leave out -SkipBuiltIn to run Maester’s own checks in the same run.

About this check

Severity	Low
Effort to fix	Low
Impact on users	Low
Pillar	Data
Category	Information Protection
Product	Purview
Feature	Information protection
Area	Data protection
Licence	RMS_S_PREMIUM, Microsoft 365 E3, Microsoft 365 E5, Advanced Message Encryption add-on
Tenant	Workforce

Product, feature, area and ATT&CK are Maester’s: the assessment does not record them, so Maester keeps them in the pack’s taxonomy.json.

A Microsoft check, part of the Zero Trust Assessment pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, MIT licence.