From 7a7f3a600035de18dfb9c5e375794d7c98a1e982 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 12 Sep 2018 12:31:28 -0700 Subject: [PATCH] added edits from Derek --- .../how-wip-works-with-mip-labels.md | 38 +++++++++++++----- .../images/sensitivity-labels.png | Bin 4429 -> 2837 bytes 2 files changed, 29 insertions(+), 9 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-wip-works-with-mip-labels.md b/windows/security/information-protection/windows-information-protection/how-wip-works-with-mip-labels.md index 1bba091ee4..2a448df493 100644 --- a/windows/security/information-protection/windows-information-protection/how-wip-works-with-mip-labels.md +++ b/windows/security/information-protection/windows-information-protection/how-wip-works-with-mip-labels.md @@ -12,7 +12,7 @@ ms.localizationpriority: medium ms.date: 08/27/2018 --- -# How Windows Information Protection works with Microsoft Information Protection labels +# How Windows Information Protection works with other Microsoft Information Protection technologies Microsoft Information Protection technologies work together as an integrated solution to help enterprises: @@ -32,25 +32,45 @@ This topic explains how Windows Information Protection works with the other Micr - [Office 365 Information Protection](https://docs.microsoft.com/office365/securitycompliance/office-365-info-protection-for-gdpr-overview) is a solution to classify, protect, and monitor personal data in Office 365 and other Software-as-a-Service (SaaS) apps. -## Default behaviors for a MIP label +## Default behaviors for a label -- When the label is configured with WIP=Work, the device enforces Work protection for documents with the MIP label +Enterprises can create and manage labels on the **Labels** page in the Office 365 Security & Compliance Center. When you create a label, you can specify that endpoint protection should apply to content with that label. + +- When the label is configured for content that includes business data, the device enforces work protection for documents with the label - When the label is *not configured* with any WIP policy, the device reverts to whatever WIP policy has been defined in Intune or System Center Configuration Manager (SCCM): - - If the document is downloaded from a work site, the device enforces Work protection + - If the document is downloaded from a work site, the device enforces work protection - If the document is downloaded from a personal site, no work protection is applied +For more information about labels, see [Overview of labels](https://docs.microsoft.com/office365/securitycompliance/labels). + +## User downloads or creates a document from a work site + +If a lable is configured so that endpoint protection will apply to content with that label, then when a user downloads or creates a new document with that label, that document will be protected by WIP. + ![Sensitivity labels](images/sensitivity-labels.png) -## User downloads any document from a work site + -## User downloads a Confidential Office or PDF document from a personal site (find out if this include PTXT) +Windows Defender ATP scans for any file that gets modified or created. If the file has a label, then the corresponding WIP protection gets applied. That can happen when you download a file or create a new file. For example: + +1. A user can create a file on a Mac device and label it as Condidential. +2. Send it via Gmail to another user on a Windows 10 device. +3. When the user opens the file on the Windows 10 device, WIP policy gets applied and the file is protected. + +The file does not need to have any other work context beyond the label. + +## User downloads a confidential Office or PDF document from a personal site + + ## Prerequisites -- Windows Defender Advanced Threat Protection (WDATP) +- Windows Defender Advanced Threat Protection (WDATP) scans content for a label and applies corresponding WIP protection - Windows 10 version 1809 -- Label configuration (via SCC in Office 365) -- Windows Information Protection policy +- Labels need to be configured in the Office 365 Security & Compliance Center +- Windows Information Protection policy need to be applied to endpoint devices diff --git a/windows/security/information-protection/windows-information-protection/images/sensitivity-labels.png b/windows/security/information-protection/windows-information-protection/images/sensitivity-labels.png index 5a497b20ca109002db993a74c541793c25ac3de1..89a133bcbe195417fc07c1e86eff7bc47e33c4d2 100644 GIT binary patch literal 2837 zcmZvec{CJk7r@5|Goz$Qi;T>~WC^or8KDIskzFAq%h0p*>r8LqI$6=Q?}0G=fXZrz(PE8)IKj`d9gP)ungo%xCzzxTu}Cn+obG51iC* z^MSSbWT^=rTBVCQb77xD+Skdu+Y5-Vju4p&0dU42HXpmicFQ1H5IY|s}BOOqjCte zsmp2o6U>Qj)d|1YVYuP92?GeF8P`M!KO2OGA{3(-vV|6#{DzRz`sOrPIkW&q>1QW_ ze9+I0(3zuZ2Iky{ffJt-u<)q-{QULxb%FiIr!B=POq@26)?pv78_lMBvSvi;F}wDO z$g~MlyTxMF^-Rf1#SwMqB|4m4d+UGvSZhy?x@Mi~{k5;Lab|UAePyU>t){SgjnqHN-S93wEe6yHZrsYQmt}ApC>j}l4VbLtR(2nXU$xDLyj@3;3#Pp8;YHnnl+P$9Zue-)lzj6vrx2{hObNGKD zov6)z^2-|uHBZf%AD`04d)0;1necI$t0|g6i>+OQ)-zMlQ>J=1+2BTyn^`j*R#rYqa_uog$`5}okidw- zat->Cq52d7?q!O0K z+k1L??4PP>X@z`i;ya5+DJxrSkbp?hLhOscoo~G?CCPj!2RYjL*G2;S*`Qble%@<^8nNsZxh-2#OJ2%`JxVuLjsOB3Wxn z!1D&K+v6!3*BhjwTxA5D+xfy~O%^tN``ISCRS_SWDFG$2$lt z4)wp0ixSe;Oi(A9zthW7^_G5%o_l`4*1wZN@>q$1TA36esf772Xq%keCr_VxdwG#D z&Fs|Eg>+~UqR1E?jsr>oUEV6#*wIxxzQc9l31RaJeaTJ{UQ(Y*_5@>vElj~5*4@aL z@jzeIb7qhlym$=&N1r3AU>>Qj`ZIPoo49+*2=8?j(I27x3!}inrNi2@IcbQ+k1>9D4pZ0Kg zPP}sJ97Gd$Ue+YNNqn0-?FIn~Cgx^{pZ&zE;b38U28)Z9J|E3-c;DcFLHoPOmg%4n43d)BeibFOBIDj1w+|j{;a6q^*%Yk_Qut*ifA5GJL-d(QbTiWKjh_r$nLZZ% zo^`yEtk znUQXX(G_+(OvI{w$*0}UBggY1DJpgE87C_I@t#k^N?`4f1RP0k%1-NcuKbmE;>~9> zUO9KDfqoCkFFVY?k*JS(W4pn;p(Tg#`VMn9fldBSCxwNQJ@1Pr>L8=?6g3(WyKjq@ z!FtJmza8WLl$sWqabg?|WOa&s6lu*$Ufr7=DG%iNoOeE%-X$KxEiHxCC2KpPCp_R%jpJ zUR!<6eKQTSAyE#Ebqg#J>12P7p&k(>bT>!-$y0|dyEdQ{&-IkqPfG*Xa$fwIQ>mxO zf_l`8iOlX0fRt3?8Sy`Tk#~ONhVR)B1v8hw%~yCwSG*Z@<8QtAL`@CIbrk_Kdg(&! z;E{6CoqZ?jY!wX(9>VPG%CFDNwG@`_u|Wzxi>x_P+v08}mCxS|)plq$61pYuO*WQQ zIp*$;dZdV8;Ql(Lk5Ao<`<2*6<*Hh6!bn##J-c2%bCo0XJo83(|ChUa+6Uy)u(V8@Zpj|k9n(XvVKc(1 zI)jvtvRsB~Im$Yq*7xl}w^iZZKd_>MTOj7??3Si+;o3g3h@*@^&2~kN7VN7+;?EKF z3wLNRF4H`7Y+G=Jy12L)C?#T=KNgz2!loVl7yrCBM?3AnHx~hcM`?n*4Y%v+0trqS z^!?I^i3w-h&qv9E;yZJCt~>viZ3t8XTqdS8V*Fxy9W3U5_Wr|M)?f=E*6f5q#0%I! zL5A_7n3U{mm|+<41vZWNFDw2~Sgsy*Au5^QKAwwodH1dVt9=m(gYZ#DP+SV^%+ry> tl(qgtf*Hl53pf%N4aZQ%=`AfgJlUDIt`j_UlDH@fFw`^FE!TD+{Rg@wOZ)%; literal 4429 zcmZ{o2T&Bvw#OHixRQe+L6M+1t5JSYZ$dgj!2e)c^v4 z#-G)%QV^e=Z)lJ-oLz`K3^bG>mHq5XXAKg2B^@OQ^9eGdqPrv3aN z>T)fyg+S*G2oV5f(I8_ZrLa_1e5d#N77M(E&Miw(o89PfxWTP#-#f0}F0N~bIlHei6Ht52 zzJGoYzW)}={aw++DF4ig<-E|dC`ju8t&&vjx6jH%LSv(}OGIQT`1h{5sSW7#x0_XX z_tDXjO+I*M_o0SD%Xri7r;OF&7cQ4AcMhVdW&3Ao5n0EF3%mBMzjzAz8eGCd(zwOS zxs43 z&@^s3Pc;{o`!-h-^WLJv$(WSO1T-=g;aL}JoOyxcc|5u4>5kS{9me{jX-ds`M|J-P z-!kYD|9Q~(<@4WfX*KnXrIn$ucMSmZh{yQK4QsfGl_|#V=+BbB+_(euw+SOL+Wak= zB(#!ZB{_*>hluigl#16b)`Ro3hz{GD<+_K5{QjP`fo~t_P;`5>_0m&dxXSOTdykRx z@RhT_CWqRaCo`+a@nc7yYtVl0yR`k3sndnmvx4Jd zG9IokE(x?xY7Pvf=g{wxiGS`GL>mXo=5%o0mek;mThk4O%WWLOO&v?;=UdpPj&25F zKMp^Y^5l--E)AZtaXIW%_x4;Ftw_6Rbj!4^Jhb9^&S_G%R(&D=} zx=8P5&~bp5^~$nY{9W_rb{}bzIAx**Tu$qHch4vWE!Ok3=kaELmH*0-^DC~4oKvTMu9Pwvi)ZY<3#4Yvor*(7D1_R1Kn^isaq= zgh>@QG+d*u?A|6cv3gmK`{0nZq*6L+N^^v*jj&(X<7|)#Hk)sU*z*H$RYr4+HBW$A zQR*^q7|Dbr^gri7`d7s${HR{DZ`Qq^M~Q=tzyQ+zwCTvJK|iS?QX8}|7)*)Mm+K|V zA46hI7UEBO>GB2P4{yCzP;_Bu+KOY7REA<6eXG<7 zZ~)+wR6k2eY8=nxVE+C%6@?f(@!S)&d#Q3m;f~w$OK|J{z++nLo$wagn=*LR+~+*eyehgNFP6gSfmeun=3Dp-nI@OExVE<7aJe^ov`+=} zL(lKL&cUrix#7U~VWPbVG)*r3M~de=o&<%!5)E=2RZynU75W1iXL1|Ne=>|~Cfdsi zej;=u>qmXtD(f?c`&7ei<*|fu%y<^`*GQpzMj98oy0(&CCpiy^F9gz^Hsz5l9>q5l7!;EmPgg4!JRqO>sB^F6?Xnxq z)YMBoa0R@PnsKC^>_E-+Ny<5@QY#dh# z8V*OS3BWw9@G^l)Qg z;PIjG@tVGJpP0;535yact|I3`3odg!zrcsb{e1jw(zb7k8p6X42G_ZzW-~v;$EXfF z3Q8n}PGxP$5YA*;P)3{?7qQGezFu5URXUp%I zvnV%2$;}UTz-BXVrI-d)=iX!Jb%|C|i0DWaeXVu#3nz(hJVpZk#=RqXn2_(Aa_x6RopTWPTeo<~ zqkLI9NS-&g?TH+=g%^+>{g8?+xDwPV$G)w2?GqBnivdp#YDHGFbNi9|;8ylKt!!F0 zVI+MuR`VV=7j9O2%G*~k58``W3=S}}x-baR5bfU42keRr@Sq~EwF@iWvouv?b4Fww zsp!VlJ1<)~Q^iW5t_%ON8BbxxIU&M}EV4k5{^AiK7COiOmr7JDdMFN2QRu?ImM+!pqiJq7&&$(fb`+bdm=uSI)V^r8SVt^9 zZekRF-5u7uX7Jmh)MbSeq8?LeA_{l!rDQzcnY8(v%VMsN5431`T^m!X{f4QV6yw#i z1z7E6p!50)DeCXf?ZB16O4oMRK9K}p@J%I36*LAxv2jbq55AueUUS!eZQCSXUsVNg z!?9l_3%@W`P`O!Rjiqab=m&*c%1lx@t#8m2i{2xbR`duNq7d=$ygd=2z5B&#u-=X? zls$}s{oT{ZK&~S}ko#*=d#IS>O0ym#tDnrPDyq&r_TWPpAISmM8i@m3vqpaSPP1kz zadBT#818v1G%nVA0cbz83cY?E6sUV=xCMcbHM=Rx!iK;gmweDV;0<{J0TF{F6`=PR z9xJ+6_&jCTxEvhIlgewY71qabEg|cTL^MmsV$mylI5Iir;Fmo&lqMViuU-8O{4oZZ zHo>Z|i_?9Jc=@INLAF)z2U{RbTwF98Gh4O;f$UCG>!VDH!A;u#OlA_kU{crs*PwS` zYzEj!>iu#g5N_54ra#3@KEMBymg4)Bx%f!u6xnSMMECKP43T8>Kjzqy4WR=obnh7f zM0;i7rk!G_cvfT@5U;NGo1s?NKpu@aFl_dgOmMY#$}j-ZE|LbOhN{kptSmX*0)JY%fb1Jyc7{=j2eA-XVOyV1GrwshD_ObYD)BtpbGXK#D=W z%4k~1NIAG%DIob^WSl3HPd~qa5;T#ym&imouq(;@$Mtj7^#le$_e}#F+83P;MyKj; z6XAPkA(}0w{HmU6#xJWskK1njkQk^t`S#4x!0Sy~+8T(0z(P#u)4}RO)JZLvlu%^7vmbkcEz9jpa6F5Tqq;<` zWZj&SFTq1QQa6HncHxwl1OY&v-hk7>xsWANkkTM@f;6r{VzrOfYGAF58HBx+gq^rJ z=r@cB*Lo>m_o9%LH2};kpDkUga6;i^eF%dJaG>h%lp{4W)4`$lC7UDyo_b{)D-50n z+9f)`+@rg+65S~|J$=Z`&@5lWxaE6byFw=DF5y0Xl+a}dN zSL&iPRU|f1`kO>q%sucf!cmmO!xU~aSE2@F7jMX#9X$fvSBLN3NY*f?rsQqbw@yh! zB#l)8SlG}Dj$x*WY*|IH;G|aI`DTWTWOSFd<5qaEAO&^CSkl07kX?y)9$h~Y%h=1z zTh;`QMIz2<-Xz60&DCT2a{JzbkT-F@GgP&2fHTsy39#SB~!V(1QUG=%C!r)Pey ztAW=-sHmt06<%ZPzP!Nvbq)4mNgU|v`_jZpM&VvP-86^6B%Pm9Rqz&etZq$RRD7!G zpuo8RVOe{#sIN*^P*eH!>A2IoM;iw(X;JgBIreF*ebZk)ba1tOPwe!so2()#Q3a&L zpUB9_NH~wV{h8Mxe1m?_{>z6ceg6x^F6OZlesDd-SzPv+Vp>y2w+e+QBLN)qP1K-5 zF~)n0J>WoKyi9=3-@5k2<1-orPb`73Px2HW5u_~JLzqW#`m+Cr24hCkptZw+ z%`_wE0;Yf$Er^AnCgO+^5DW}F>WCuCsx3UN7YKPFR0jIAp44rL1jF#jIt3~9MZVQo zvNu5$BCLv)7f|tv=j%eWy8SNaIS5mqM>Z7~{$hn4z`Pf5U~v{v+rTp#nrjZ_c>ahL z$p2T`G~NQ?>{88S7dxpVRR