2022-07-18 16:08:19 -04:00

2.2 KiB
Raw Blame History

title, description, ms.date, ms.prod, ms.topic, ms.localizationpriority, author, ms.author, ms.reviewer, manager
title description ms.date ms.prod ms.topic ms.localizationpriority author ms.author ms.reviewer manager
How to disable Windows Information Protection (WIP) How to disable Windows Information Protection (WIP) 07/15/2022 m365-security how-to medium lizgt2000 lizlong aaroncz dougeby

How to disable Windows Information Protection (WIP)

Applies to:

  • Windows 10
  • Windows 11

purple box

Use Intune to disable WIP

To remove Windows Information Protection (WIP) using Intune, you have the following options:

Option 1 - Remove the WIP Policy (Unassign) - preferred

Removing an existing enable policy will remove the intent to deploy WIP from those devices. When that intent is removed, a device will remove protection for files and the configuration for WIP.

Option 2 - Change current WIP policy to off

If youre currently deploying a WIP policy for enrolled or unenrolled devices, you switch the WIP policy to Off. When devices check-in after this change, the devices will proceed to unprotect files previously protected by WIP.

  1. Sign in to the Microsoft Endpoint Manager.
  2. Open Microsoft Intune and select Apps > App protection policies > In Client apps - App protection policies, select <> apps. Select the existing policy to turn off.
  3. From App protection policy, select the name of your policy, and then select the name of your properties.
  4. Edit required settings. liz figure 1
  5. Set Windows Information Protection mode to off.
  6. After making this change, select review and save.
  7. Select save.

Create a disable policy - write this as a note

You can create a separate disable policy for WIP (both enrolled and unenrolled) and deploy that to your organization. You then stage the rollout by complimenting your existing enablement policy and moving entities slowly from being targeted with enable to the disable policy.

Use Configuration Manager to disable WIP

To remove Windows Information Protection (WIP) using Configuration Manager

liz needs steps Copy steps from create-wip-policy-using-configmgr

liz next steps

baseline -link

collection -link

deploy baseline to collection -link

moving devices from old collection to new collection