Forum Discussion
Azure information protection custom policies not working
In addition to checking the firewall isn't blocking IP addresses and URLs, check it's not terminating your TLS connection, which breaks certificate pinning. I've added a tip how to check for this client-side, if you don't manage the firewall yourself. See https://docs.microsoft.com/en-us/information-protection/get-started/requirements#firewalls-and-network-infrastructure
I've got same problem with you today.
I created a label and a label policy in M365 Security Center (I'm using Unified Labeling client as required)
But it doesn't work well.
After hours of troubleshooting and found that I've met all of those requirements mentioned in technet docs.
But, a strange default "Archived" state of the label (template) caused my custom label to stop working.
You can try using the following commands to troubleshoot:-
Set-ExecutionPolicy Bypass
Install-Module AIPService
Import-Module AIPService
Connect-AIPService
Get-AipServiceTemplate | FL
Get-AipServiceTemplateProperty -TemplateId <xxxxxxxx> -Status <--- this reports the custom label is at "Archived" state by default, what the hell.
To fix it:-
Set-AipServiceTemplateProperty -TemplateId <xxxxxx> -Status Published
After these, I can now apply the label in either Office apps or File Explorer
This link helped me in troubleshooting
https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-templates#considerations-for-templates-in-the-azure-portal
Larry_ChanThanks for the update, as I have expanded my uses of Labels and Policies I encountered this and this fix one of my label issues.