Relevant for: AIP unified labeling and classic clients

Imports local configuration for the Azure Information Protection scanner.


      -FileName <String>


The Import-AIPScannerConfiguration cmdlet imports local configuration settings for the Azure Information Protection scanner, and automatically configures the scanner to use offline configuration.

Use this cmdlet after you've configured the following in the Azure portal:

  • Configured a cluster (unified labeling client only) or a profile
  • Configured a content scan job for the scanner
  • Exported the settings to a file instead of having the scanner connect to the Azure Information Protection service.

For example, use this cmdlet when the computer running the scanner doesn't have Internet connectivity.

If you need to make configuration changes to the scanner after you have run this cmdlet, make those changes in the Azure portal, export the content scan job again, and rerun this cmdlet.

If you want to change the scanner to use online configuration after you have run this cmdlet, use the Set-AIPScannerConfiguration and set the OnlineConfiguration parameter to On.

Any changes will be used the next time the scanner runs. If you need the changes to take effect immediately, restart the Azure Information Protection Scanner service on the Windows server computer.


To provide a unified and streamlined customer experience, the Azure Information Protection classic client and Label Management in the Azure Portal are deprecated as of March 31, 2021. While the classic client continues to work as configured, no further support is provided, and maintenance versions will no longer be released for the classic client.

We recommend that you migrate to unified labeling and upgrade to the unified labeling client. Learn more in our recent deprecation blog.


Example 1: Import local configuration settings for the Azure Information Protection scanner

PS C:\> Import-AIPScannerConfiguration -FileName "C:\Scannerconfig\Eu-set.json"
Configuration was imported successfully.

The scanner is configured to prevent getting its configuration directly from the Azure Information Protection service, and the configuration settings are imported from a file named C:\Scannerconfig\Eu-set.json.



Specifies a file that contains scanner configuration settings. To create this file, export your content scan job from the Azure portal.

The file is used to do a one-time import of configuration settings into the scanner configuration database.

Default value:None
Accept pipeline input:False
Accept wildcard characters:False