https://docs.microsoft.com/en-us/microsoft-365/compliance/revoke-ome-encrypted- mail?view=o365-worldwide#how-to-revoke-an-encrypted-message-as-an-administrator Get the Message ID of the email. Verify that you can revoke the message. Revoke the mail. It's not asking what to do first, but prevent user from accessing the email.