Microsoft Azure Information Protection For Mac
- Free Virus Protection For Mac
- Microsoft Azure Information Protection For Mac Free
- Microsoft Azure Information Protection
- Microsoft Azure Information Protection For Mac Download
- Azure Information Protection Mac Os
- Applications that support Azure Rights Management data protection.; 8 minutes to read; In this article. Applies to: Azure Information Protection, Office 365 Use the following information to identify the applications and solutions that natively support the Azure Rights Management service (Azure RMS), which provides the data protection for Azure Information Protection.
- Jan 12, 2020 Applies to: Azure Information Protection, Office 365. Use the following sections to identify which devices support the Azure Rights Management service. This service provides data protection for Azure Information Protection.
Mar 09, 2020 Microsoft Azure Information Protection helps you classify and label data in your organization at the time of creation, as well as apply protection, based on encryption and usage rights for sensitive data. Labels, and protection are persistent, traveling with the data throughout its lifecycle, so that it’s detectable and controlled at all times – regardless of where it’s stored or with.
Applies to: Active Directory Rights Management Services, Azure Information Protection, Windows 10, Windows 8.1, Windows 8, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012
Note
To provide a unified and streamlined customer experience, Azure Information Protection client (classic) and Label Management in the Azure Portal are being deprecated as of March 31, 2021. This time-frame allows all current Azure Information Protection customers to transition to our unified labeling solution using the Microsoft Information Protection Unified Labeling platform. Learn more in the official deprecation notice.
Azure Information Protection provides a client-server solution that helps to protect an organization's documents and emails:
The client can be the built-in labeling client for Office, the Azure Information Protection unified labeling client for Windows, the Azure Information Protection client (classic) for Windows, or the Rights Management client.
These clients are often referred to as the Office built-in labeling client, the unified labeling client, the classic client, and the RMS client, respectively. Whichever client you use, it integrates with applications that you run on computers and mobile devices.
The service resides in the cloud or on-premises. The cloud service is Azure Information Protection, which uses the Azure Rights Management service for the data protection. The on-premises service is Active Directory Rights Management Services, more commonly known as AD RMS.
All these clients integrate with Office applications but the unified labeling client and the classic client must be installed separately and support additional features and components. For example, these clients include support for File Explorer, so you can classify and protect files outside Office. Additional components include a viewer for protected PDF documents and protected images, and a scanner for on-premises data stores.
The RMS client provides protection only. This client is automatically installed with some applications, such as Office applications, the Azure Information Protection clients, and RMS-enlightened applications from software vendors. However, it can also be installed by itself, to support synchronizing files from IRM-protected libraries and OneDrive for Business, and for developers who want to integrate rights management protection into line-of-business applications.
Choose which labeling client to use for Windows computers
Where possible, use one of the labeling clients because labels abstract the complexity of applying protection for users, and labels also provide classification so you can track and manage your data.
Your choice of labeling client for your Windows computers might be influenced by which management portal you use:
The Office built-in labeling client and the Azure Information Protection unified labeling client download labels and policy settings from the following admin centers:
- Office 365 Security & Compliance Center
- Microsoft 365 security center
- Microsoft 365 compliance center
The Azure Information Protection client (classic) downloads label and policy settings from the Azure portal.
Because the unified labeling client and the classic client require a separate installation to Office, you must download and install these clients from the Microsoft Download Center.
Which client should you use?
Use the labeling client built in to Office for your Windows computers when you have Office 365 apps that are a minimum version 1910, you want to use the same labels and policy settings that can also be used by MacOS, iOS, and Android, and you don't need features in your Office apps that require the unified labeling client or classic client. These features include the Information Protection bar under the ribbon for easier label selection and visibility.
This client supports switching accounts, and because it doesn't use an Office add-in, it has better performance in Office apps than using either of the Azure Information Protection clients. Because labeling is built into Office, there's no separate install and maintenance for this labeling client. In addition, unlike an Office add-in, it can't be disabled.
Use the Azure Information Protection unified labeling client on Windows computers for labels and policy settings that can also be used by MacOS, iOS, and Android, you want to label files independently from Office 365 apps, and you don't need features that are only supported by the classic client. These features currently include protecting content with an on-premises key (HYOK) and a general availability version of the scanner for on-premises data stores.
Install the Azure Information Protection client (classic) on Windows computers if you need a version of the client that has features that are not yet available with the unified labeling client. Although this client can use the same labels as those used by MacOS, iOS, and Android, it has different policy settings. So your tradeoff is administration using another management portal and a different user experience for users.
The latest version of the unified labeling client brings it to close parity in features with the classic client. As this gap closes, you can expect new features to be added only to the unified labeling client. For this reason, we recommend you deploy the unified labeling client if its current feature set and functionality meet your business requirements. If not, or if you have configured labels in the Azure portal that you haven't yet migrated to the unified labeling store, use the classic client.
You can use different clients in the same environment to support different business requirements, as demonstrated in the following deployment example. In a mixed client environment, we recommend you use unified labels so that clients share the same set of labels for ease of administration. New customers have unified labels by default because their tenants are on the unified labeling platform. For more information, see How can I determine if my tenant is on the unified labeling platform?
When you have a Windows computer that runs Office 365 apps that are a minimum version 1910 and one of the Azure Information Protection clients is installed, by default the built-in labeling client is disabled in Office apps. However, you can change this behavior to use the built-in labeling client for just your Office apps. With this configuration, the Azure Information Protection client (classic or unified labeling) remains available for labeling in File Explorer, PowerShell, and the scanner. For instructions to disable the Azure Information Protection client in Office 365 apps, see the section Office built-in labeling client and the Azure Information Protection client from the Microsoft 365 Compliance documentation.
Example deployment strategy:
For the majority of users, you deploy the Azure Information Protection unified labeling client because this client meets the business needs for these users.
For these users, their labeling experience is very similar across Windows, Mac, iOS, and Android because they have the same labels published to them and the same policy settings. As an admin, you manage these labels and policy settings in the same management center.
You also install the unified labeling client for yourself, to test the the Azure Information Protection scanner.
For a subset of users, you deploy the classic client because these users require labels that apply hold your own key (HYOK) protection.
For these users, they have a slightly different labeling experience when they use this client. For example, they see a Protect button rather than a Sensitivity button in Office apps. As an admin, you need to manage their labels for HYOK settings and policy settings in a different management center to the labels and settings for the other client platforms.
You have on-premises data stores with documents that need to be scanned for sensitive information, or classified and protected. For production use, you deploy the classic client on servers to run the Azure Information Protection scanner.
Compare the labeling clients for Windows computers
Free Virus Protection For Mac
Use the following table to help compare which features are supported by the three labeling clients for Windows computers.
To compare the Office built-in sensitivity labeling features across different operating system platforms (Windows, MacOS, iOS, and Android) and for the web, see the Microsoft 365 Compliance documentation, Support for sensitivity label capabilities in apps. This documentation also includes the Office build numbers or Office update channel information for the supported features.
| Feature | Classic client | Unified labeling client | Office built-in labeling client |
|---|---|---|---|
| Manual labeling: | Yes | Yes | Yes |
| Default label: | Yes | Yes | Yes |
| Recommended or automatic labeling: - For Word, Excel, PowerPoint | Yes | Yes | Yes |
| Recommended or automatic labeling: - For Outlook | Yes | Yes | No |
| Mandatory labeling: | Yes | Yes | No |
| User-defined permissions for a label: - Do Not Forward for emails | Yes | Yes | Yes |
| User-defined permissions for a label: - Custom permissions for Word, Excel, PowerPoint, File Explorer | Yes | Yes | Yes |
| Multilanguage support for labels: | Yes | Yes | Yes |
| Label inheritance from email attachments: | Yes | Yes | No |
| Customizations that include: - Default label for email - Pop-up messages in Outlook - S/MIME support - Report an Issue option | Yes1 | Yes2 | No |
| Scanner for on-premises data stores: | Yes | Yes | No |
| Central reporting (analytics): | Yes | Yes | No |
| Custom permissions set independently from a label: | Yes | Yes3 | No |
| Information Protection bar in Office apps: | Yes | Yes | No |
| Visual markings as a label action (header, footer, watermark): | Yes | Yes | Yes |
| Per app visual markings: | Yes | Yes | No |
| Dynamic visual markings with variables: | Yes | Yes | No |
| Label with File Explorer: | Yes | Yes | No |
| A viewer for protected files (text, images, PDF, .pfile): | Yes | Yes | No |
| PPDF support for applying labels: | Yes | No | No |
| PowerShell labeling cmdlets: | Yes | Yes4 | No |
| Offline support for protection actions: | Yes | Yes5 | Yes |
| Manual policy file management for disconnected computers: | Yes | Yes | No |
| HYOK support: | Yes | No | No |
| Usage logging in Event Viewer: | Yes | No | No |
| Display the Do Not Forward button in Outlook: | Yes | No | No |
| Track protected documented: | Yes | Yes6 | No |
| Revoke protected documents: | Yes | No | No |
| Protection-only mode (no labels): | Yes | No | No |
| Support for account switching: | No | No | Yes |
| Support for Remote Desktop Services: | Yes | Yes | Yes |
| Support for AD RMS: | Yes | No 7 | No |
| Remove external content marking in app | Yes | No | Yes |
Footnotes:
1These settings, and many more are supported as advanced client settings that you configure in the Azure portal.
2These settings, and many more are supported as advanced settings that you configure with PowerShell.
3Supported by File Explorer and PowerShell. In Office apps, users can select File Info > Protect Document > Restrict Access.
4No support to remove protection from container files (zip).
5For File Explorer and PowerShell commands, the user must be connected to the internet to protect files.
6The document tracking site that's supported by the classic client isn't supported by the unified labeling client. However, without the need to first register the document for tracking, administrators can use central reporting to identify whether protected documented are accessed from Windows computers, and whether access was granted or denied.
7Labeling and protection actions aren't supported. However, for an AD RMS deployment, the viewer can open protected documents when you use the Active Directory Rights Management Services Mobile Device Extension.
Detailed comparisons for the Azure Information Protection clients
When the Azure Information Protection client (classic) and the Azure Information Protection unified labeling client both support the same feature, use the following table to help identify some functional differences between the two clients.
| Functionality | Classic client | Unified labeling client |
|---|---|---|
| Setup: | Option to install local demo policy | No local demo policy |
| Label selection and display when applied in Office apps: | From the Protect button on the ribbon From the Information Protection bar (horizontal bar under the ribbon) | From the Sensitivity button on the ribbon From the Information Protection bar (horizontal bar under the ribbon) |
| Manage the Information Protection bar in Office apps: | For users: - Option to show or hide the bar from the Protect button on the ribbon - When a user selects to hide the bar, by default, the bar is hidden in that app, but continues to automatically display in newly opened apps For admins: - Policy settings to automatically show or hide the bar when an app first opens, and control whether the bar automatically remains hidden for newly opened apps after a user selects to hide the bar | For users: - Option to show or hide the bar from the Sensitivity button on the ribbon - When a user selects to hide the bar, the bar is hidden in that app and also in newly opened apps For admins: - PowerShell setting to manage the bar |
| Label color: | Configure in the Azure portal | Retained after label migration and configurable with PowerShell |
| Labels support different languages: | Configure in the Azure portal | Configure by using Office 365 Security & Compliance PowerShell |
| Policy update: | When an Office app opens When you right-click to classify and protect a file or folder When you run the PowerShell cmdlets for labeling and protection Every 24 hours For the scanner: Every hour and when the service starts and the policy is older than one hour | When an Office app opens When you right-click to classify and protect a file or folder When you run the PowerShell cmdlets for labeling and protection Every 4 hours For the scanner: Every 4 hours |
| Supported formats for PDF: | Protection: - ISO standard for PDF encryption (default) - .ppdf Consumption: - ISO standard for PDF encryption - .ppdf - SharePoint IRM protection | Protection: - ISO standard for PDF encryption Consumption: - ISO standard for PDF encryption - .ppdf - SharePoint IRM protection |
| Generically protected files (.pfile) opened with the viewer: | File opens in the original app where it can then be viewed, modified, and saved without protection | File opens in the original app where it can then be viewed and modified, but not saved |
| Supported cmdlets: | Cmdlets for labeling and cmdlets for protection-only | Cmdlets for labeling: Set-AIPFileClassification and Set-AIPFileLabel don't support the Owner parameter In addition, there is a single comment of 'No label to apply' for all scenarios where a label isn't applied Set-AIPFileClassification supports the WhatIf parameter, so it can be run in discovery mode Set-AIPFileLabel doesn't support the EnableTracking parameter Get-AIPFileStatus doesn't return label information from other tenants and doesn't display the RMSIssuedTime parameter In addition, the LabelingMethod parameter for Get-AIPFileStatus displays Privileged or Standard instead of Manual or Automatic. For more information, see the online documentation. |
| Justification prompts (if configured) per action in Office: | Frequency: Per file Lowering the sensitivity level Removing a label Removing protection | Frequency: Per session Lowering the sensitivity level Removing a label |
| Remove applied label actions: | User is prompted to confirm Default label or automatic label (if configured) isn't automatically applied next time the Office app opens the file | User isn't prompted to confirm Default label or automatic label (if configured) is automatically applied next time the Office app opens the file |
| Automatic and recommended labels: | Configured as label conditions in the Azure portal with built-in information types and custom conditions that use phrases or regular expressions Configuration options include: - Unique / Not unique count - Minimum count | Configured in the admin centers with built-in sensitive information types and custom information types Configuration options include: - Unique count only - Minimum and maximum count - AND and OR support with information types - Keyword dictionary - Customizable confidence level and character proximity |
| Order support for sublabels on attachments: | Enabled with an advanced client setting | Enabled by default, no configuration required |
| Change the default protection behavior for file types: | You can use registry edits to override the defaults of native and generic protection | You can use PowerShell to change which file types get protected |
For a detailed comparison of behavior differences for specific protection settings, see Comparing the behavior of protection settings for a label.
Features not planned to be in the Azure Information Protection unified labeling client
Although the Azure Information Protection unified labeling client is still under development, the following features and behavior differences from the classic client are not currently planned to be available in future releases for the unified labeling client:
Custom permissions as a separate option that users can select in Office apps: Word, Excel, and PowerPoint
Track and revoke options from Office apps and File Explorer
Information Protection bar title and tooltip
Protection-only mode (no labels) using templates
Protect PDF document as .ppdf (older format)
Office 365 customers get the new Office for Mac first. You’ll have Office applications on your Mac or PC, apps on tablets and smartphones for when you're on the. 2020-4-2 Microsoft sells Mac versions of popular PC applications, such as Word, Excel, PowerPoint, and Outlook. If you frequently need to use files created by these programs, getting Word or the entire Office suite may be a wise investment. Microsoft Office 2008 for OS X goes on sale in early 2008. It’ll be file-compatible with Office. How does mac work with microsoft office free.
Display the Do Not Forward button in Outlook
Demo policy
Confirmation prompt Do you want to delete this label? for users when you don't use the policy setting for justification
Separate PowerShell cmdlets to connect to a Rights Management service
Parent labels and their sublabels
The Azure Information Protection client (classic) doesn't support configurations that specify a parent label that has sublabels. These configurations include specifying a default label, and a label for recommended or automatic classification. When a label has sublabels, you can specify one of the sublabels but not the parent label.
For parity, the Azure Information Protection unified labeling client also doesn't support applying parent labels that have sublabels, even though you can select these labels in the admin centers. In this scenario, the Azure Information Protection unified labeling client will not apply the parent label.
Next steps
To install and configure the Azure Information Protection clients, use the following documentation:
For more information about using the built-in labeling client for Office 365 apps, see Sensitivity labels in Office apps.
-->Applies to: Azure Information Protection, Office 365
Microsoft Azure Information Protection For Mac Free
Use the following sections to identify which devices support the Azure Rights Management service. This service provides data protection for Azure Information Protection.
Microsoft Azure Information Protection
Computers
The following computer operating systems support the Azure Rights Management service:
Windows 7 (x86, x64)
Windows 8 (x86, x64)
Windows 8.1 (x86, x64)
Windows 10 (x86, x64)
macOS: Minimum version of macOS 10.8 (Mountain Lion)
Microsoft Azure Information Protection For Mac Download
Mobile devices
The following mobile device operating systems support the Azure Rights Management service:
Android phones and tablets: Minimum version of Android 6.0
iPhone and iPad: Minimum version of iOS 11.0
Windows phones and tablets: Windows 10 Mobile
Azure Information Protection Mac Os
Next steps
To check for other requirements, see Requirements for Azure Information Protection.