disable the AIP add-in to use built-in labeling for Office apps - but its not working
Hi, This article talks about disabling the AIP add-in to use built-in labeling for Office apps: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-aip?view=o365-worldwide#how-to-disable-the-aip-add-in-to-use-built-in-labeling-for-office-apps We followed this article to enable this feature: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-office-apps?view=o365-worldwide - Navigate to User Configuration/Administrative Templates/Microsoft Office 2016/Security Settings. - Set Use the Sensitivity feature in Office to apply and view sensitivity labels to 1 We can now see the AIP COM Add-in is disabled in MS Word - even though we are using Office 365 (with an E5 license). However, where on the MS Word ribbon do we now find AIP labels? Where is this built-in labeling option for Office apps we are supposed to be using now? Because it looks like when we disable the AIP COM add-in, it also removes AIP from MS Word. Also, my AIP Policy default is to auto-label every new document as "General" - and this also is no longer working. Are we meant to enable something AIP related somewhere else? Thank youAIP and CSV files?
Hi, How does AIP handle CSV files? Looking at this article, https://docs.microsoft.com/en-us/azure/information-protection/rms-client/clientv2-admin-guide-file-types, it says CSV file are supported for inspection...so what does that mean in relation to Classification and Labeling? Also, the article doesn't mention that ".CSV" files get renamed to ".PFile" after AIP Protection (which it does as I have just tested it). So if I right-click a CSV file, select "Classify and Protect", I get this option: What is meant by "Generic Encryption"? Why can we not see the usual Permissions in the 'Select Permission' drop-down? So its confusing, but do CSV files get protected or not via AIP? Thanks
Microsoft Azure Information Protection Uninstall Issue
We installed AIP installer to ~3000 machines and we deployed v2.13.49.0 to all of our machines last year and didn't upgrade it. We have since had a request in to remove it from all machines, this is fine but we found when testing some were failing the uninstall. Did a bit of digging to the failures and saw we had multiple newer versions installed 2.14.90.0, 2.16.73.0, 2.16.79.0, 2.17.66.0 Did a bit more digging and saw that Windows Update has been updating some but not all. I tried to download the newer versions so I could package then send the uninstall but not all are there to download. I then went down the GUID to uninstall them which works "SORT OF" but not fully, it uninstalls the app but it is still lingering in the Add/Remove Programs window and is still showing as installed. If I click uninstall in there it goes through the uninstall process and its then gone. Problem is I do not and cannot get the other version installers as they are no longer available and wondered if anyone has hit this issue yet and if there is some sort or rip out app/script? because this is not good.
Apply Sensitivity Labels using Graph APIs
While using Beta Graph API for Sensitivity Label - (https://graph.microsoft.com/beta/drives/myDriveID/items/myItemID/microsoft.graph.assignSensitivityLabel), I get the below error. I am using Delegated App Permission. { "error": { "code": "notSupported", "message": "AssignSensitivityLabel API is not yet available", "innerError": { "date": "2022-09-29T16:30:30", "request-id": "edd756cc-12f2-4781-ba07-004d601f42a0", "client-request-id": "edd756cc-12f2-4781-ba07-004d601f42a0" } https://graph.microsoft.com/beta/drives/DriveID/items/ItemID/microsoft.graph.extractSensitivityLabel - This works very well using the same token and other permission levels. Please help. VasilMichevWhy is Compliance Portal Content Explorer showing sensitive data?
Hi, We have an Azure Tenant with no Azure Information Protection configured. Why then is Content Explorer in the Compliance Portal showing so much Sensitive Data??? If AIP is not configured, what is running and doing this inventory? Thank you, SKAIP: An inactive label was specified, BadInputError.Code=General
Hi, We have created 4 new AIP labels and associated it with a new AIP Label Policy. We are able to manually assign these new labels to Office documents. The AIP Policy also successfully auto applies the "Company_General" label to all documents (via the AIP Scanner for on-prem files). However, when the AIP Scanner tries to auto apply the label: 'Company_Confidential', to data containing Credit Card information, we get the following error: "An inactive label was specified, BadInputError.Code=General, CorrelationId=5871dc03-XXXX-YYYY-8988-cf3e49da55e0, CorrelationId.Description=FileHandler, BadInputError.Code=General""",General,1fd3f303-XXXX-YYYY-a0c3-2ba85efc0f04,,,,Credit Card Number,,2022-03-29 01:43:50Z,,false, However when I open this same file and press Save, the correct 'Company_Confidential' label is applied to the document. What could be causing the AIP Scanner to fail like this? Thank you, SKAIP Custom Permissions Pop-up window issue
I noticed that custom permission windows changed around 2 weeks ago, to the old RMS window. The weird thing what happening is I can temporarily fix the issue by resetting AIP settings, but after the Office app restart (close-open) I`m getting old, RMS (Screen #2) windows instead of normal (Screen #1) custom permission window. Also, every time I create a new doc (Word, Excel, PowerPoint) it is taking while to retrieve the policy from the server (Screen #3) Screen #1 - Normal Window Screen #2 - RMS Screen #3 - Policy
What happens when a Policy Tip in Microsoft Data Loss Prevention is reported?
I'm creating documentation to explain the functions of policy tips, and I cannot find documentation for what happens when a Policy Tip is reported in Microsoft's Data Loss Prevention features. I've clicked on "Report" but nothing happens on my side. My only guesses are that 1. The reports go to the administrator that created the policy for evaluation and remediation, or 2. The report is sent to Microsoft for analysis like in MS Defender for 365.
Undo Button is greyed in WORD after applying a sensitive label
Hi All, I noticed that the UNDO button on my WORD documents are GREYED out when I apply a sensitivity label. The issue happens only to WORD, no issues with EXCEL or PPT files. Those who don't have the MIP feature not enabled yet, don't have any issues with the UNDO button. The issue happens to any word document (Old or new). It does not matter if the document is Auto Saved or manually saved. My Office version is Microsoft® Word for Microsoft 365 MSO (Version 2204 Build 16.0.15128.20278) 64-bit
