User Profile
pheeeling
Brass Contributor
Joined 6 years ago
User Widgets
Recent Discussions
Move AIP sublabels to a different parent label
Hi I'm trying to rebuild my label structure and want to move a existing label to a new parent label to ease user acceptance. It looks like the advanced powershell cmdlets don't allow for that: WARNING: Encountered exception: Microsoft.Exchange.Management.Transport.LabelParentChangeNotAllowedException: The label already has a parent 8ebb64e0-8991-4556-8dee-d5ae67a20a74, cannot change to parent a2d31973-1b2b-4b55-a1f3-06491b124ba9. Is there a way to do this? Or can I use the Secure Island migration process to move all users from a specifc label to a new one? (https://docs.microsoft.com/en-us/azure/information-protection/rms-client/clientv2-admin-guide-customizations#migrate-labels-from-secure-islands-and-other-labeling-solutions) Some experience or help would be appreciated. Nir Hendler Information Protection & Governance Microsoft Information ProtectionAIP and Word "Track Changes" feature / Best way to deal with password protected excel files
Hi All, Can somebody give more information on limitation introducted with Azure Information Protection on Word and Excel Files? Which Excel and Word Features are still possible to use? Is there somewhere a list of limitations. My searches weren't successful for the specific situation below. Situation: I onboarded a customer to AIP. The setup is rather simplistic. All documents within certain location should have protection that only tenant members can open and edit them. We tought using AIP would be more targeted rather than DLP Policies because we would protect the files and not control sharing functionalities. We introduced one label with two assigned permission groups Co-Owner and Co-Author. Classification has been handled through Powershell because we don't know which content to protect only that files in that certain location should be protected. 1. Problem: Protection worked fine on 95% of files but the customer heavily used password protection on some excel files. We understand that password protected files need to be unprotect before AIP Labels can be applied. But the usage is scattered. I'm currently looking into creating a powershell script which scan through the files unprotects workbooks and apply AIP Protection. Has somebody experience with this problem and already implemented a solution? Is this approach the best way to solve it or should I consider other paths? 2. Problem: Protected Word files lose the ability to track changes if you are a CoAuthor. Is there a way to limit users from removing labels / protection but allowing them to use all word other word features? kind of CoOwner but without edit rights? I'm trying currently to work with a custom role where everything is checked expect edit rights, export content. Any experience with this situation? Mavi Etzyon-Grizer Do you know a person which has deeper insights? Thanks for any help. Best regards PhilippRe: AIP and Word "Track Changes" feature / Best way to deal with password protected excel files
Problem 2 was very simple. Word Track Changes feature is only available with edit content rights permission within Office 365 ProPlus 1807 and higher (https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights). I'm still open for any feedback related to problem 1.Re: Protecting PDF using Unified Labelling
Hi pradeepg290 Check if your PDF File is at least version 1.7 or if it have been protected by another Adobe mechanism. Mostly I encounter those errors with the wrong pdf version. To change your pdf version you either need the source document as docx etc. and safe it with a up to date office version or change it via compatibility settings in pdf writer software. In Adobe following link may help: https://blogs.adobe.com/acrolaw/2007/10/change_pdf_versions_using_acroba/ RegardsRe: "Common Attachment Types Filter" and file types known by Office 365
Hi AndreasMarx Excel Macro is still quite widespread so you can't automatically exclude it (I know sounds strange). I think following statement clears out the situation. Inspectable file extensions are known to antimalware policies and don't really on name comparision. https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-malware-protection-faq-eop?view=o365-worldwide#how-can-i-configure-the-service-to-block-specific-executable-files-such-as-exe-that-i-fear-may-contain-malware Following section talks about the inspectable filetypes. Take a look if it helps you. https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/inspect-message-attachments#supported-file-types-for-mail-flow-rule-content-inspection With those documentation I would start my scenario's. Hope it helps. RegardsRe: Unified Labeling Client - Provide help link to a custom help page
Hi mmancina Found my problem. I had multiple label policies assigned to me which seemed had conflicting settings. After reducing the policy label set to one it worked. I don't understand why it worked with the built in client and not with the AIP UL client. Maybe this link helps you as well: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide#label-policy-priority-order-matters RegardsRe: Unified Labeling Client - Provide help link to a custom help page
Hi mmancina Statement: Custom help link does work the same way in both the AIP client and the built-in labeling, its location is slightly different: in native this is the "Learn More" link in the bottom of the drop-down menu; in the AIP client this is "Tell me more" link in the "Help and feedback" pop-up windows. But for me this doesn't work. I need to check if I miss something else. RegardsRe: Unified Labeling Client - Provide help link to a custom help page
Hi mmancina We got the same issue. It seems to work with the built in client but not with the unified labeling client. After installation of the unified labeling client this option disappears. Also checked Azure Information Protection Viewer "Learn More" Link and the sub menu in the unified labeling client. I send a text to https://www.yammer.com/askipteam/#/users/147599745024 maybe she replies. Best regards
