Home

Windows Information Protection (WIP) on domain joined devices (on-premise AD)

%3CLINGO-SUB%20id%3D%22lingo-sub-127843%22%20slang%3D%22en-US%22%3EWindows%20Information%20Protection%20(WIP)%20on%20domain%20joined%20devices%20(on-premise%20AD)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-127843%22%20slang%3D%22en-US%22%3E%3CP%3EHas%20anyone%20tried%20in%20successfully%20deploying%20Intune%20Windows%20Information%20Protection%20on%20Domain%20joined%20Windows%2010%20PCs%3F%20What%20I%20meant%20of%20domain%20joined%20is%20the%20presence%20of%20an%20on-premise%20Windows%20Active%20Directory.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20get%20the%20fact%20the%20Windows%20Information%20Protection%20works%20seamlessly%20on%20BYOD%20devices%20(Workgroup%20PCs).%20But%20I%20cannot%20get%20this%20to%20work%20on%20devices%20within%20the%20domain.%20Can%20somebody%20lead%20me%20to%20articles%20on%20how%20to%20specifically%20do%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-127843%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-131003%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Information%20Protection%20(WIP)%20on%20domain%20joined%20devices%20(on-premise%20AD)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-131003%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F89358%22%20target%3D%22_blank%22%3E%40Christopher%20DelaTorre%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EUnfortunately%20I%60m%20not%20able%20to%20help%20you.%20But%20I%60m%20wondering%2C%20are%20non-managed%20devices%20forced%20to%20use%20WIP%3F%20A%20while%20ago%20I%20have%20been%20playing%20with%20WIP%2C%20but%20as%20an%20example%20Windows%207%20devices%20were%20still%20able%20to%20access%20data%20and%20not%20forced%20to%20use%20WIP.%20Have%20you%20been%20able%20to%20block%20those%20devices%3F%3C%2FP%3E%0A%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128339%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Information%20Protection%20(WIP)%20on%20domain%20joined%20devices%20(on-premise%20AD)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128339%22%20slang%3D%22en-US%22%3E%3CP%3Ehere%20is%20the%20only%20thing%20I%20could%20find%20on%20logging%20for%20WIP%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fthreat-protection%2Fwindows-information-protection%2Fcollect-wip-audit-event-logs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fthreat-protection%2Fwindows-information-protection%2Fcollect-wip-audit-event-logs%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-128322%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Information%20Protection%20(WIP)%20on%20domain%20joined%20devices%20(on-premise%20AD)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-128322%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Joe%2C%3C%2FP%3E%3CP%3EThanks%20for%20replying.%20Yes%2C%20that%20article%20was%20my%20guide%20in%20creating%20the%20WIP%20policies.%20As%20I%20was%20saying%2C%20it%20works%20if%20the%20device%20is%20under%20workgroup%20and%20I%20could%20see%20the%20briefcase%20encryption%20overlay%20icon%20on%20the%20files.%20However%2C%20I%20seemingly%20couldn't%20get%20this%20to%20work%20on%20domain%20joined%20devices%20even%20if%20they%20are%20already%20Intune%20MDM%20installed.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAre%20there%20log%20files%20that%20I%20could%20check%20to%20dig%20deeper%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-127916%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Information%20Protection%20(WIP)%20on%20domain%20joined%20devices%20(on-premise%20AD)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-127916%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Christopher%2C%3C%2FP%3E%3CP%3EI%20am%20not%20aware%20of%20any%20customers%20who%20have%20deployed%20WIP.%20Here%20are%20the%20document%20links%20you%20requested.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fthreat-protection%2Fwindows-information-protection%2Fprotect-enterprise-data-using-wip%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fthreat-protection%2Fwindows-information-protection%2Fprotect-enterprise-data-using-wip%3C%2FA%3E%3C%2FP%3E%3CP%3EI%20would%20love%20to%20hear%20more%20about%20your%20experience!%20It%20seems%20like%20WIP%20has%20its%20place%20perhaps%20in%20Healthcare%2C%20Financial%20Services%2C%20and%20perhaps%20DoD%20or%20other%20secure%20infrastructures.%20Outside%20of%20that%20its%20hard%20for%20me%20to%20picture%20a%20place%20for%20WIP%20because%20it%20seems%20to%20restrict%20the%20collaboration%20capabilities%20of%20B2B%20sharing.%20Seems%20like%20Azure%20Information%20Protection%20is%20more%20flexible%20to%20me.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Christopher DelaTorre
Occasional Contributor

Has anyone tried in successfully deploying Intune Windows Information Protection on Domain joined Windows 10 PCs? What I meant of domain joined is the presence of an on-premise Windows Active Directory.

 

I get the fact the Windows Information Protection works seamlessly on BYOD devices (Workgroup PCs). But I cannot get this to work on devices within the domain. Can somebody lead me to articles on how to specifically do this?

4 Replies

Hi Christopher,

I am not aware of any customers who have deployed WIP. Here are the document links you requested.

https://docs.microsoft.com/en-us/windows/threat-protection/windows-information-protection/protect-en...

I would love to hear more about your experience! It seems like WIP has its place perhaps in Healthcare, Financial Services, and perhaps DoD or other secure infrastructures. Outside of that its hard for me to picture a place for WIP because it seems to restrict the collaboration capabilities of B2B sharing. Seems like Azure Information Protection is more flexible to me.

Hi Joe,

Thanks for replying. Yes, that article was my guide in creating the WIP policies. As I was saying, it works if the device is under workgroup and I could see the briefcase encryption overlay icon on the files. However, I seemingly couldn't get this to work on domain joined devices even if they are already Intune MDM installed. 

 

Are there log files that I could check to dig deeper?

Hi @Christopher DelaTorre

Unfortunately I`m not able to help you. But I`m wondering, are non-managed devices forced to use WIP? A while ago I have been playing with WIP, but as an example Windows 7 devices were still able to access data and not forced to use WIP. Have you been able to block those devices?

Thank you!

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies