Windows Information Protection (WIP)

Overview of the Windows Information Protection (WIP) technology.

To develop Windows Information Protection (WIP), you need these headers:

• edpwin32.h
• efswrtinterop.h
• srpapi.h

For guidance for this technology, see:

• Windows Information Protection (WIP)

• Generate guidance and best practices for Windows Information Protection (WIP)

• Create a Windows Information Protection (WIP) policy using Microsoft Intune

Enumerations

ENTERPRISE_DATA_POLICIES Indicates whether the app is enlightened for Windows Information Protection (WIP) and whether the app is managed by policy.

Functions

GetForWindow Returns the protection policy manager object associated with the current app window.
ProtectFileToEnterpriseIdentity Protects the data in a file to an enterprise identity, so that only users who are associated with that enterprise identity can access the data. The application can then use standard APIs to read or write from the file.
RequestAccessForAppWithAuditingInfoForWindowAsync Request access to enterprise-protected content for a specific target app. (IProtectionPolicyManagerInterop2.RequestAccessForAppWithAuditingInfoForWindowAsync)
RequestAccessForAppWithMessageForWindowAsync Request access to enterprise-protected content for a specific target app. (IProtectionPolicyManagerInterop2.RequestAccessForAppWithMessageForWindowAsync)
RequestAccessForAppWithWindowAsync Request access to enterprise-protected content for a specific target app. (IProtectionPolicyManagerInterop2.RequestAccessForAppWithWindowAsync)
RequestAccessForWindowAsync Request access to enterprise protected content for an identity. (IProtectionPolicyManagerInterop.RequestAccessForWindowAsync)
RequestAccessWithAuditingInfoForWindowAsync Request access to enterprise protected content for an identity. (IProtectionPolicyManagerInterop2.RequestAccessWithAuditingInfoForWindowAsync)
RequestAccessWithMessageForWindowAsync Request access to enterprise protected content for an identity. (IProtectionPolicyManagerInterop2.RequestAccessWithMessageForWindowAsync)
SrpCloseThreadNetworkContext Restores a thread back to the original context, which may have been optionally returned from SrpCreateThreadNetworkContext.
SrpCreateThreadNetworkContext Sets the enterprise ID as the data context of the current thread. This is allowed only if the process already has the same enterprise ID present in its process context. It optionally returns the existing thread token.
SrpDisablePermissiveModeFileEncryption Disables permissive mode for file encryption on the current thread.
SrpDoesPolicyAllowAppExecution Evaluates whether a packaged app will be allowed to execute based on software restriction policies.
SrpEnablePermissiveModeFileEncryption Enables permissive mode for file encryption on the current thread and all threads this thread will create or post work to.
SrpGetEnterpriseIds Gets the list of enterprise identifiers for the given token.
SrpGetEnterprisePolicy Policy can be applied on Windows 10, version 1607.Gets information about the enterprise policy of an app.
SrpIsTokenService Identifies whether a service is a token service.
SrpSetTokenEnterpriseId Sets a data intent on a token. The caller process should be enterprise allowed for the provided enterprise ID.

Interfaces

IProtectionPolicyManagerInterop Manages enterprise protection policy on protected content. (IProtectionPolicyManagerInterop)
IProtectionPolicyManagerInterop2 Manages enterprise protection policy on protected content. (IProtectionPolicyManagerInterop2)