Announcing the sunset of Windows Information Protection (WIP)

We are in the middle of an implementation of this technology.. WIP WE has some big flaws/bugs but we've made so much effort of preparing this implementation! Is this just time and effort lost without a solution in our current licensing landscape??

you guys do realize that WIP is easier to deploy than DLP right ?

the cost is cheaper for sure when compare to Endpoint DLP.

and what about Intune Managed Device, is it going to be removed too ?

I am torn on this split. For quite some time I have wanted Microsoft to clarify and integrate this whole area, so that is great in Purview. Azure file protection, windows, exchange server, several differing systems presented significant adoption friction.

Purview: good, but putting the file data protection on E5, I am not so sure.

David_Swenson  Are the labelling and policies enforcing file copy/forward/print/etc. in E3? Those are the features you are describing, so I think you are good. I think it is the file encryption (is it broadly known as DRM?) pushed into the E5 tier, which I suppose I get, because it is premium.

Rafal_Sosnowski , Can we please have guidance on how to configure File Ownership with the new Purview solution? Hundreds of our clients have come to depend on WIP (especially with the rise in remote work) since it can simply prevent users from copying data stored in OneDrive/SharePoint to other areas like C Drive, Google Drive, DropBox... From my understanding of DLP and its licensing limitations this feels much more like a "cash grab" by Microsoft rather than something your customers want/need. 

How can this be applied to BYOD devices that are only registered, not MDM managed? End users typically do not want their BYOD devices under full management and also have concerns with their personal data being interrogated by DLP. WIP offered the equivalent of Intune app protection for BYOd windows client devices. 

jhuylebroeck Sorry, you are wrong. Copy/paste block, personal/work data separation and apps/domain whitelisting on clients (=Windows PCs) are Windows Information Protection features available currently in M365 E3. When WIP is discontinued, you will need E5 to get similar features (that is why I specifically wrote Endpoint DLP + Microsoft Defender for Cloud Apps which are good substitutions and have similar features but are only available in E5 or with add-ons).

Sensitivity/Retention labels have nothing to do with WIP, those are completely different features so not sure what you are getting at. Yeah, they are part of Purview.

I see that you're worried about this Pavel Otych. I think it's not all doom and gloom though, as major parts of what's delivered by Purview is already present in M365 E3 and/o M365BP.

https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#which-licenses-provide-the-rights-for-a-user-to-benefit-from-the-service-18 (except for DLP for Teams which is an E5 feature and Endpoint DLP, which is a Microsoft Defender for Endpoint P2 feature)

https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#microsoft-purview-information-protection-sensitivity-labeling (manual labeling, automation requires E5)

https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#microsoft-purview-data-lifecycle-management (automation requires E5)

OK, so you are removing an existing E3 functionality (Windows Information Protection) in favour of functionality only available in E5 (Endpoint DLP + Microsoft Defender for Cloud Apps). This sucks, WIP was a decent alternative to the E5 solutions.