windows-itpro-docs/windows/security/information-protection/windows-information-protection/mandatory-settings-for-wip.md

title, description, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, ms.author, manager, audience, ms.collection, ms.topic, ms.date, ms.reviewer

title	description	keywords	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.localizationpriority	author	ms.author	manager	audience	ms.collection	ms.topic	ms.date	ms.reviewer
Mandatory tasks and settings required to turn on Windows Information Protection (WIP) (Windows 10)	Review all of the tasks required for Windows to turn on Windows Information Protection (WIP), formerly enterprise data protection (EDP), in your enterprise.	Windows Information Protection, WIP, EDP, Enterprise Data Protection, protected apps, protected app list, App Rules, Protected apps list	m365-security	explore	library	security	medium	dansimp	dansimp	dansimp	ITPro	M365-security-compliance	conceptual	05/25/2022

Mandatory tasks and settings required to turn on Windows Information Protection (WIP)

Applies to:

• Windows 10, version 1607 and later

This list provides all of the tasks and settings that are required for the operating system to turn on Windows Information Protection (WIP), formerly known as enterprise data protection (EDP), in your enterprise.

Task	Description
Add at least one app of each type (Store and Desktop) to the Protected apps list in your WIP policy.	You must have at least one Store app and one Desktop app added to your Protected apps list. For more info about where this area is and how to add apps, see the Add apps to your Protected apps list section of the policy creation topics. at least one each (Store and Desktop) app" into their protected apps policy as a requirement
Choose your WIP protection level.	You must choose the level of protection you want to apply to your WIP-protected content, including Allow Overrides, Silent, or Block. For more info about where this area is and how to decide on your protection level, see the Manage the WIP protection mode for your enterprise data section of the policy creation topics. For info about how to collect your audit log files, see How to collect Windows Information Protection (WIP) audit event logs.
Specify your corporate identity.	This field is automatically filled out for you by Microsoft Intune. However, you must manually correct it if it’s incorrect or if you need to add additional domains. For more info about where this area is and what it means, see the Define your enterprise-managed corporate identity section of the policy creation topics.
Specify your network domain names.	Starting with Windows 10, version 1703, this field is optional. Specify the DNS suffixes used in your environment. All traffic to the fully-qualified domains appearing in this list will be protected. For more info about where this area is and how to add your suffixes, see the table that appears in the Choose where apps can access enterprise data section of the policy creation topics.
Specify your enterprise IPv4 or IPv6 ranges.	Starting with Windows 10, version 1703, this field is optional. Specify the addresses for a valid IPv4 or IPv6 value range within your intranet. These addresses, used with your Network domain names, define your corporate network boundaries. For more info about where this area is and what it means, see the table that appears in the Define your enterprise-managed corporate identity section of the policy creation topics.
Include your Data Recovery Agent (DRA) certificate.	Starting with Windows 10, version 1703, this field is optional. But we strongly recommend that you add a certificate. This certificate makes sure that any of your WIP-encrypted data can be decrypted, even if the security keys are lost. For more info about where this area is and what it means, see the Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate topic.

Note

Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see Editing Windows IT professional documentation.