windows-itpro-docs/windows/keep-secure/using-owa-with-wip.md
Brian Lich 0667e1e1fe Revert "reverting changes"
This reverts commit ecd000f39a712dab62dcc117494c8be802a18637.
2017-01-25 14:45:35 -08:00

2.5 KiB
Raw Blame History

title, description, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, localizationpriority
title description keywords ms.prod ms.mktglfcycl ms.sitesec ms.pagetype localizationpriority
Using Outlook Web Access with Windows Information Protection (WIP) (Windows 10) Options for using Outlook Web Access (OWA) with Windows Information Protection (WIP). WIP, Windows Information Protection, EDP, Enterprise Data Protection, WIP and OWA configuration w10 explore library security high

Using Outlook Web Access with Windows Information Protection (WIP)

Applies to:

  • Windows 10, version 1607
  • Windows 10 Mobile

Learn more about what features and functionality are supported in each Windows edition at Compare Windows 10 Editions.

Because Outlook Web Access (OWA) can be used both personally and as part of your organization, you have the following options to configure it with Windows Information Protection (WIP):

Option OWA behavior
Disable OWA. Employees can only use Microsoft Outlook 2016 or the Office 365 Mail app. Disabled.
Don't configure outlook.office.com in any of your networking settings. All mailboxes are automatically marked as personal. This means employees attempting to copy work content into OWA receive prompts and that files downloaded from OWA aren't automatically protected as corporate data.
Do all of the following:
  • Create a domain (such as mail.contoso.com, redirecting to outlook.office.com) that can be used by your employees to access work email.
  • Add the new domain to the Enterprise Cloud Resources network element in your WIP policy.
  • Add the following URLs to the Neutral Resources network element in your WIP policy:
    • outlook.office365.com
    • outlook.office.com
    • outlook-sdf.office.com
    • attachment.outlook.office.net
Inbox content accessed through the new domain is automatically marked as corporate data, while content accessed through personal email is automatically marked as personal.
Add outlook.office.com to the Enterprise Cloud Resources network element in your WIP policy. All mailboxes are automatically marked as corporate. This means any personal inboxes hosted on Office 365 are also automatically marked as corporate data.

Note

These limitations dont apply to Outlook 2016 or to the Office 365 Mail and Calendar apps. These apps will work properly, marking an employees mailbox as corporate data, regardless of how youve configured outlook.office.com in your network settings.