If you are sending a tracked video using an embed link in Outlook, note that the video will play only if the video is hosted on Microsoft-hosted domains, such as "office365.com", "office.net", "static.microsoft", "skype.com", "office.net", "office.com", "sharepoint.com", "yammer.com", "office.live.net", or similar.
Users attempting to view a video that is not hosted on one of these domains will get a "Refused to load media from <server> because it violates the following Content Security Policy directive:" error.
This is a built-in limitation by Microsoft when using Outlook online; users of the desktop version of Outlook do not have this limitation.