Forum Discussion

Calum Steen's avatar
Calum Steen
Brass Contributor
Sep 23, 2019

Can you remove Sensitivity Labels for a user after deploying AIP UL client and Office 2016 apps?

We're piloting Sensitivity Labels in Office 2016 apps by using the AIP UL client; this has been deployed to 12 people using SCCM, the same 12 are in the emailed-enabled group to whom we've published the policy.

 

I've now removed 2 people from the policy group, but Labels are still showing in Outlook. It looks like publishing is a 'one way' option.

 

Can these be Labels removed without using SCCM to remove the AIP UL client?

1 Reply

  • Pål Winther's avatar
    Pål Winther
    Iron Contributor

    HiCalum Steen. To make sure AIP is rolled out to certain users we use onboarding controls.

    https://docs.microsoft.com/en-us/powershell/module/aipservice/set-aipserviceonboardingcontrolpolicy?view=azureipps&WT.mc_id=email

     

    As it says here: Example 1: Restrict Azure Information Protection to users who have a license and are members of a specified group

    PS C:\> Set-AipServiceOnboardingControlPolicy -UseRmsUserLicense $True -SecurityGroupObjectId "fba99fed-32a0-44e0-b032-37b419009501" -Scope All

     

Resources