Home

Enlightened app (Windows Information Protection)

%3CLINGO-SUB%20id%3D%22lingo-sub-452222%22%20slang%3D%22en-US%22%3EEnlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-452222%22%20slang%3D%22en-US%22%3E%3CP%3EWithin%20Windows%20Information%20Protection%20(WIP)%20there%20is%20support%20for%20enlightened%20apps.%20These%20are%20apps%20that%20basically%20know%20the%20difference%20between%20personal%20and%20corporate%20data.%20Is%20the%20new%20Microsoft%20Edge%20already%20an%20enlightened%20app%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-456369%22%20slang%3D%22en-US%22%3ERE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-456369%22%20slang%3D%22en-US%22%3EAt%20present%2C%20no%2C%20Edge%20Dev%2FCanary%20is%20not%20an%20enlightened%20app.%20WIP%20remains%20an%20area%20of%20active%20investigation.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-695535%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-695535%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F317619%22%20target%3D%22_blank%22%3E%40ericlaw%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20updates%20on%20this%20topic%3F%20This%20feature%20would%20be%20very%20important%20for%20our%20costumers.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20Thanks%2C%3C%2FP%3E%3CP%3EMarkus%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-736359%22%20slang%3D%22en-US%22%3ERe%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-736359%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20very%20interested%20in%20this%20as%20well.%20Windows%20Information%20Protection%20support%20equivalent%20to%20IE%20is%20a%20huge%20MUST.%20This%20in%20addition%20to%20IE%20mode%20and%20policies%2C%20will%20allow%20enterprises%20to%20consolidate%20on%20a%20single%20browser%2C%20which%20would%20be%20a%20huge%20leap%20forward.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-736361%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-736361%22%20slang%3D%22en-US%22%3EHoping%20this%20in%20on%20a%20roadmap.%20As%20my%20organization%20is%20very%20interested%20in%20this.%20Windows%20Information%20Protection%20support%20equivalent%20to%20IE%20is%20a%20huge%20MUST.%20This%20in%20addition%20to%20IE%20mode%20and%20policies%2C%20will%20allow%20enterprises%20to%20consolidate%20on%20a%20single%20browser%2C%20which%20would%20be%20a%20huge%20leap%20forward.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-830561%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-830561%22%20slang%3D%22en-US%22%3EWIP%20support%20is%20important%20for%20the%20new%20Microsoft%20Edge%20and%20is%20on%20the%20roadmap.%20Recent%20builds%20of%20Edge%20in%20all%20channels%20are%20enlightened%20and%20the%20feature%20is%20available%20behind%20a%20feature%20flag%20(%23edge-dataprotection)%20while%20we%20continue%20to%20develop%20it.%20We%20are%20very%20interested%20in%20learning%20from%20people%20who%20have%20deployed%20WIP%20in%20their%20organization.%20Please%20contact%20me%20via%20private%20message%20if%20you%20are%20willing%20to%20talk%20to%20us%20over%20the%20phone%20about%20your%20deployment%20configuration%20and%20any%20pain%20points%20which%20you%20might%20have%20with%20WIP%20support%20in%20the%20browser.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-987646%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-987646%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F398823%22%20target%3D%22_blank%22%3E%40Arunesh%3C%2FA%3E%26nbsp%3BI%20see%20this%20WIP%20option%2C%20on%20default%20state%20in%20v80%20...%2C%20can%20you%20confirm%20this%20works%20and%20Edge%20Insider%20is%20now%20enligtened%20app%20on%20Windows%2010%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-988282%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-988282%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F280793%22%20target%3D%22_blank%22%3E%40hkusulja%3C%2FA%3E%26nbsp%3BEdge%20is%20now%20marked%20as%20an%20enlighted%20app%2C%20but%20the%20policies%20are%20not%20correctly%20applied.%20For%20instance%20Copy%2FPaste%20is%20disabled%20via%20a%20WIP%20policy%2C%20but%20it's%20still%20possibly%20to%20copy%20corporate%20content%20to%20a%20private%20document.%20In%20all%20other%20WIP%20enabled%20apps%20this%20function%20is%20blocked.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-989503%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-989503%22%20slang%3D%22en-US%22%3EChromium%20Edge%E2%80%99s%20support%20for%20WIP%20is%20under%20development%20and%20hence%20available%20behind%20a%20feature%20flag.%3CBR%20%2F%3E%3CBR%20%2F%3EAs%20of%20now%20the%20following%20WIP%20integration%20functionalities%20are%20available%20to%20pilot%3A%3CBR%20%2F%3E%E2%80%A2%20File%20protection%20on%20the%20device%20when%20downloaded%20from%20a%20work%20location%3CBR%20%2F%3E%E2%80%A2%20Audit%20%2F%20Block%20%2F%20Override%20enforcement%20for%20File%20Uploads%3CBR%20%2F%3E%E2%80%A2%20Briefcase%20visual%20indicator%20available%20on%20the%20address%20bar%20when%20browsing%20work%20locations%3CBR%20%2F%3E%E2%80%A2%20Browsing%20to%20work%20locations%20from%20other%20profiles%20automatically%20redirects%20to%20the%20Work%20Profile%20(associated%20with%20the%20Azure%20AD%20Identity)%3CBR%20%2F%3E%E2%80%A2%20IE%20Mode%20supports%20full%20WIP%20integration%3CBR%20%2F%3E%3CBR%20%2F%3EComing%20soon%3A%3CBR%20%2F%3E%E2%80%A2%20Audit%20%2F%20Block%20%2F%20Override%20enforcement%20for%20Clipboard%20actions%3CBR%20%2F%3E%E2%80%A2%20Audit%20%2F%20Block%20%2F%20Override%20enforcement%20for%20Drag%20%26amp%3B%20Drop%20actions%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1001693%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1001693%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F402188%22%20target%3D%22_blank%22%3E%40Naren-%3C%2FA%3E%26nbsp%3BPlease%20confirm%20that%20flag%26nbsp%3B%3CSPAN%3E%23edge-dataprotection%20%2C%20on%20defaults%20means%20off%2C%20and%20if%20we%20need%20this%20feature%20we%20manually%20need%20to%20turn%20it%20on%3F%3CBR%20%2F%3EAlso%20can%20you%20reference%20list%20of%20flags%20and%20its%20default%20state%20meaning%20(how%20to%20check%20is%20it%20off%20or%20on%3F)%20Tx%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1004368%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1004368%22%20slang%3D%22en-US%22%3EYes...By%20default%20it%20is%20Off%20for%20now.%20And%20you'll%20have%20to%20turn%20it%20on%20manually.%20That's%20the%20only%20flag%20required%20for%20WIP%20integration.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1006250%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Enlightened%20app%20(Windows%20Information%20Protection)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1006250%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F402188%22%20target%3D%22_blank%22%3E%40Naren-%3C%2FA%3E%26nbsp%3BOk%2C%20I%20can%20confirm%20that%20in%20Beta%20channel%2C%20v79%2C%20after%20enabling%20flag%2C%20WIP%20works%20%3A)%3C%2Fimg%3E%20thank%20you%3C%2FP%3E%3C%2FLINGO-BODY%3E
Remco van Noorloos
Senior Member

Within Windows Information Protection (WIP) there is support for enlightened apps. These are apps that basically know the difference between personal and corporate data. Is the new Microsoft Edge already an enlightened app?

10 Replies
At present, no, Edge Dev/Canary is not an enlightened app. WIP remains an area of active investigation.

@ericlaw 

 

Any updates on this topic? This feature would be very important for our costumers. 

 

Many Thanks,

Markus

Hoping this in on a roadmap. As my organization is very interested in this. Windows Information Protection support equivalent to IE is a huge MUST. This in addition to IE mode and policies, will allow enterprises to consolidate on a single browser, which would be a huge leap forward.
WIP support is important for the new Microsoft Edge and is on the roadmap. Recent builds of Edge in all channels are enlightened and the feature is available behind a feature flag (#edge-dataprotection) while we continue to develop it. We are very interested in learning from people who have deployed WIP in their organization. Please contact me via private message if you are willing to talk to us over the phone about your deployment configuration and any pain points which you might have with WIP support in the browser.

@Arunesh I see this WIP option, on default state in v80 ..., can you confirm this works and Edge Insider is now enligtened app on Windows 10 ?

@hkusulja Edge is now marked as an enlighted app, but the policies are not correctly applied. For instance Copy/Paste is disabled via a WIP policy, but it's still possibly to copy corporate content to a private document. In all other WIP enabled apps this function is blocked.

Chromium Edge’s support for WIP is under development and hence available behind a feature flag.

As of now the following WIP integration functionalities are available to pilot:
• File protection on the device when downloaded from a work location
• Audit / Block / Override enforcement for File Uploads
• Briefcase visual indicator available on the address bar when browsing work locations
• Browsing to work locations from other profiles automatically redirects to the Work Profile (associated with the Azure AD Identity)
• IE Mode supports full WIP integration

Coming soon:
• Audit / Block / Override enforcement for Clipboard actions
• Audit / Block / Override enforcement for Drag & Drop actions

@Naren- Please confirm that flag #edge-dataprotection , on defaults means off, and if we need this feature we manually need to turn it on?
Also can you reference list of flags and its default state meaning (how to check is it off or on?) Tx

Yes...By default it is Off for now. And you'll have to turn it on manually. That's the only flag required for WIP integration.

@Naren- Ok, I can confirm that in Beta channel, v79, after enabling flag, WIP works :) thank you

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
ChirmyRam in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies