Forum Discussion
How to share confidential files
So, as I understand it, the method that is readily available for everyone is outdated and the preferred (aip) needs to be installed specifically for each user?
Could AIP handle our scenario:
* retain full control for all users in our org
* block all access for externals
* allow specific external users read access (But prevent them from sharing, copying, printing or taking screen shots)
* work well with sharing (so we don’t need to attach a copy)?
Hope this helps!
Moe
https://www.microsoft.com/en-us/us-partner-blog/2018/11/05/microsoft-information-protection-and-unified-labeling/
https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-migrate-labels
- Thank you Moe, very helpful!
/Erik- So, I finally got to try using Microsoft Information Protection and got a test label in place.
It was completely hassle free to get it up and running and to be available in the Office Apps.
However, when actually sharing a protects file I must be doing something wrong because it is exactly the same terrible user experience for the receiver as before. A popup screen saying the file cannot be opened in the online version of Word because the file protected by IRM - and with no way to open it as it should be opened (in desktop apps).
I've worked together with MS support to do whatever is possible to ensure all docs are always opened directly in desktop apps wherever possible - but still this annoying "bug by design" occurs.Erik Wettergren Hello, my guess for the reason why you're not seeing the possibility to open the protected document in Office app is that you're sharing the document through anonymous link. Only authenticated users see the button "Edit in Word desktop app" available (not matter what permission they have - it can be read only access) when opening protected document.
However, this creates another layer of complexity to your workflow, cause you'll need to grant the users some external access to SharePoint if you want to share documents this way... Honestly, you might be better off just sending the documents through email or publishing it somewhere else (like a web server for download). It's hard to say, depends on how many external users you need to give access and how time consuming it will be to manage them in the long run.
