windows-itpro-docs/windows/security/information-protection/windows-information-protection/enlightened-microsoft-apps-and-wip.md

title, description, ms.assetid, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, ms.author, manager, audience, ms.collection, ms.topic, ms.date

title	description	ms.assetid	keywords	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.localizationpriority	author	ms.author	manager	audience	ms.collection	ms.topic	ms.date
List of enlightened Microsoft apps for use with Windows Information Protection (WIP) (Windows 10)	Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your allowed apps list.	17c85ea3-9b66-4b80-b511-8f277cb4345f	WIP, Windows Information Protection, EDP, Enterprise Data Protection	w10	explore	library	security	medium	justinha	justinha	dansimp	ITPro	M365-security-compliance	conceptual	02/26/2019

List of enlightened Microsoft apps for use with Windows Information Protection (WIP)

Applies to:

• Windows 10, version 1607 and later
• Windows 10 Mobile, version 1607 and later

Learn the difference between enlightened and unenlightened apps, and then review the list of enlightened apps provided by Microsoft along with the text you will need to use to add them to your allowed apps list.

Enlightened versus unenlightened apps

Apps can be enlightened or unenlightened:

• Enlightened apps can differentiate between corporate and personal data, correctly determining which to protect, based on your policies.

• Unenlightened apps consider all data corporate and encrypt everything. Typically, you can tell an unenlightened app because:

  • Windows Desktop shows it as always running in enterprise mode.

  • Windows Save As experiences only allow you to save your files as enterprise.

• WIP-work only apps are unenlightened line-of-business apps that have been tested and deemed safe for use in an enterprise with WIP and Mobile App Management (MAM) solutions without device enrollment. Unenlightened apps that are targeted by WIP without enrollment run under personal mode.

List of enlightened Microsoft apps

Microsoft has made a concerted effort to enlighten several of our more popular apps, including the following:

• Microsoft Edge

• Internet Explorer 11

• Microsoft People

• Mobile Office apps, including Word, Excel, PowerPoint, OneNote, and Outlook Mail and Calendar

• Office 365 ProPlus apps, including Word, Excel, PowerPoint, OneNote, and Outlook

• OneDrive app

• OneDrive sync client (OneDrive.exe, the next generation sync client)

• Microsoft Photos

• Groove Music

• Notepad

• Microsoft Paint

• Microsoft Movies & TV

• Microsoft Messaging

• Microsoft Remote Desktop

List of WIP-work only apps from Microsoft

Microsoft still has apps that are unenlightened, but which have been tested and deemed safe for use in an enterprise with WIP and MAM solutions.

• Skype for Business

Adding enlightened Microsoft apps to the allowed apps list

You can add any or all of the enlightened Microsoft apps to your allowed apps list. Included here is the Publisher name, Product or File name, and App Type info for both Microsoft Intune and System Center Configuration Manager.

Product name	App info
Microsoft Edge	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.MicrosoftEdge App Type: Universal app
Microsoft People	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.People App Type: Universal app
Word Mobile	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.Office.Word App Type: Universal app
Excel Mobile	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.Office.Excel App Type: Universal app
PowerPoint Mobile	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.Office.PowerPoint App Type: Universal app
OneNote	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.Office.OneNote App Type: Universal app
Outlook Mail and Calendar	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: microsoft.windowscommunicationsapps App Type: Universal app
Office 365 ProPlus and Office 2019 Professional Plus	Office 365 ProPlus and Office 2019 Professional Plus apps are set up as a suite. You must use the O365 ProPlus - Allow and Exempt AppLocker policy files (.zip files) to turn the suite on for WIP. We don't recommend setting up Office by using individual paths or publisher rules.
Microsoft Photos	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.Windows.Photos App Type: Universal app
Groove Music	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.ZuneMusic App Type: Universal app
Microsoft Movies & TV	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.ZuneVideo App Type: Universal app
Microsoft Messaging	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.Messaging App Type: Universal app
IE11	Publisher: O=Microsoft Corporation, L=Redmond, S=Washington, C=US Binary Name: iexplore.exe App Type: Desktop app
OneDrive Sync Client	Publisher: O=Microsoft Corporation, L=Redmond, S=Washington, C=US Binary Name: onedrive.exe App Type: Desktop app
OneDrive app	Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Product Name: Microsoft.Microsoftskydrive **Product Version:**Product version: 17.21.0.0 (and later) App Type: Universal app
Notepad	Publisher: O=Microsoft Corporation, L=Redmond, S=Washington, C=US Binary Name: notepad.exe App Type: Desktop app
Microsoft Paint	Publisher: O=Microsoft Corporation, L=Redmond, S=Washington, C=US Binary Name: mspaint.exe App Type: Desktop app
Microsoft Remote Desktop	Publisher: O=Microsoft Corporation, L=Redmond, S=Washington, C=US Binary Name: mstsc.exe App Type: Desktop app
Microsoft MAPI Repair Tool	Publisher: O=Microsoft Corporation, L=Redmond, S=Washington, C=US Binary Name: fixmapi.exe App Type: Desktop app

Note

Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see Editing Windows IT professional documentation.