This commit is contained in:
Justin Hall 2018-09-12 14:03:11 -07:00
parent 2466fb2f7b
commit ff94599a2a

View File

@ -52,30 +52,31 @@ For more information about labels, see [Overview of labels](https://docs.microso
## User downloads or creates a document from a work site ## User downloads or creates a document from a work site
If WIP policy is deployed, any document that is created or downloaded from a work site will have WIP protection, regradless of whether the document has a label. If WIP policy is deployed, any document that is created or downloaded from a work site will have WIP protection, regradless of whether the document has a label.
If the document is an Office or PDF file with a label, then WIP protection is applied. If the document has a label, which includes Office and PDF files, then WIP protection is applied.
## User downloads a confidential Office or PDF document from a personal site ## User downloads a confidential Office or PDF document from a personal site
Windows Defender ATP scans for any file that gets modified or created. Windows Defender ATP scans for any file that gets modified or created, including files that were downloaded from or created on a personal site.
If the file has a label, then the corresponding WIP protection gets applied. If the file has a label, then the corresponding WIP protection gets applied, even though the file was created or downloaded from a personal site.
That can happen when you download a file or create a new file.
For example: For example:
1. A user creates a file on a Mac device and labels it as Confidential. 1. Sara creates a PDF file on a Mac device and labels it as Confidential.
2. The user sends it via Gmail to another user on a Windows 10 device. 2. She emails the PDF from her Gmail account to Laura, who is using a Windows 10 device.
3. When the other user opens the file on the Windows 10 device, WIP policy gets applied and the file is protected. 3. When Laura opens the PDF file, WIP policy gets applied and the file is protected.
The file does not need to have any other work context beyond the label. The PDF file doesn't need any other work context beyond the label.
<!-- does not include PTXT <!-- does not include PTXT
--> -->
## Prerequisites ## Prerequisites
- Windows Defender Advanced Threat Protection (WDATP) scans content for a label and applies corresponding WIP protection WIP
- [Windows Defender Advanced Threat Protection (WDATP)](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/windows-defender-advanced-threat-protection) scans content for a label and applies corresponding WIP protection
- Windows 10 version 1809 - Windows 10 version 1809
- Labels need to be configured in the Office 365 Security & Compliance Center - [Labels](https://docs.microsoft.com/office365/securitycompliance/labels) need to be configured in the Office 365 Security & Compliance Center
- Windows Information Protection policy need to be applied to endpoint devices - [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip) policy need to be applied to endpoint devices