question

ShimKwan-8714 avatar image
0 Votes"
ShimKwan-8714 asked ShimKwan-8714 edited

disable the AIP add-in to use built-in labeling for Office apps - but its not working

Hi,

This article talks about disabling the AIP add-in to use built-in labeling for Office apps:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-aip?view=o365-worldwide#how-to-disable-the-aip-add-in-to-use-built-in-labeling-for-office-apps

We followed this article to configure this feature: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-office-apps?view=o365-worldwide

  • Navigate to User Configuration/Administrative Templates/Microsoft Office 2016/Security Settings.

  • Set Use the Sensitivity feature in Office to apply and view sensitivity labels to 1

We can now see the AIP COM Add-in is disabled in MS Word - even though we are using Office 365 (with an E5 license).

However, where on the MS Word ribbon do we now find AIP labels?
Where is this built-in labeling option for Office apps we are supposed to be using now?
Because it looks like when we disable the AIP COM add-in, it also removes AIP from MS Word.

Also, our AIP Policy default is to auto-label every new document as "General" - and this also is no longer working.

Are we meant to enable something AIP related somewhere else?

Thank you

azure-information-protection
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@ShimKwan-8714

Thank you for reaching out to us. I am researching on your query and will revert back.

0 Votes 0 ·

appreciate your help on this as there is not much documentation on the new AIP built-in client and functionality.

0 Votes 0 ·
Givary-MSFT avatar image
0 Votes"
Givary-MSFT answered

@ShimKwan-8714

Thank you for your patience, did a repro at my end with the issue mentioned above, here are my findings.

With the AIP UL Client enabled, Sensitivity icon appears like this in the app

197389-microsoftteams-image.png


With AIP Native Labelling, Sensitivity icon appears like this in the app

197463-microsoftteams-image-1.png

In AIP UL Client vs AIP Native Labelling, labels do get applied, only the interface gets changed.

To answer this query ""looks like when we disable the AIP COM add-in, it also removes AIP from MS Word"" -

After making the changes, did you restart all the office apps ? Below is the word application right after disabling the AIP COM add-in without restarting the app, there is no sensitivity icon

197482-microsoftteams-image-2.png

Also make sure office apps are updated with the latest versions to achieve the desired results related to AIP functionality.

Let me know if you have any questions.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ShimKwan-8714 avatar image
0 Votes"
ShimKwan-8714 answered ShimKwan-8714 edited

Hi @GirishVaryani

May I just start by thanking you, as you have been MOST helpful in all my questions - thank you for taking the time to reproduce the problem and attend to my queries!

I have once again repeated the steps, so let me run you through what I am seeing, if I may:

The version of Office we are using is: 2204 (just tried an update and everything is up to date)
And we have E5 licensing.
197542-officeversion.png

When the COM Add-in is active, the toolbar looks as expected:
197468-aip-comaddin-enabled.png

When we configure the GPO, the COM Add-in becomes disabled, again, this is expected behavior:
197524-gpmc.png
197460-comaddin-disabled.png

And this is where my problem still exists. I have even restarted the Windows 10 client (twice)...but we still cannot see any 'Sensitivity' option on the Office ribbon (as per your screenshots):
197469-aip-comaddin-disabled.png

So do you think its the version of Office that is the problem?
Or is it some other setting we did not enable?

And here is another interesting finding:
We opened Office Online, and can see the 'Sensitivity' option in Word, HOWEVER, we are seeing AIP labels that we actually do not have - like the 'Highly Confidential' label...we dont have this actually created - so where is it coming from?
197516-officeonlinelabelsdifferent.png

Also, we have a single AIP Policy that is publishing ONLY 2 AIP labels, so why are we seeing 4 labels in the above screenshot??
197525-aippolicylabels.png


This is all somewhat confusing ;)

Thank you,
SK



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.