用户指南:使用 Azure 信息保护时跟踪和撤销文档User Guide: Track and revoke your documents when you use Azure Information Protection

适用于: Azure 信息保护、windows 10、Windows 8.1、Windows 8Applies to: Azure Information Protection, Windows 10, Windows 8.1, Windows 8

说明:适用于 Windows 的 Azure 信息保护客户端Instructions for: Azure Information Protection client for Windows

使用 Azure 信息保护来保护你的文档后,可跟踪用户如何使用这些文档。After you have protected your documents by using Azure Information Protection, you can track how people are using these documents. 如果用户不应再阅读这些文档,还可撤销其对这些文档的访问权限(如有必要)。If necessary, you can also revoke access to them if people should no longer be able to read them. 若要执行此操作,请使用“文档跟踪站点”****。To do this, you use the document tracking site. 可以通过 Windows 计算机、Mac 计算机甚至平板电脑和手机访问此站点。You can access this site from Windows computers, Mac computers, and even from tablets and phones.

访问该站点时,登录即可对文档进行跟踪。When you access this site, sign in to track your documents. 如果你的组织有一个支持文档跟踪和吊销的订阅,而你已被分配了一个该订阅的许可证,你就可以看到谁曾经尝试打开受保护的文件,以及这些用户是否已成功(即成功完成了身份验证)。When your organization has a subscription that supports document tracking and revocation and you are assigned a license for this subscription, you can see who tried to open the files that you protected and whether they were successful (they were successfully authenticated) or not. 还会看到他们访问文档的每一次尝试,以及访问时所在的位置。You also see each time they tried to access the document, and their location at the time. 但是,在极少数情况下,报告的位置可能不准确。However, in rare cases, the location reported might not be accurate. 例如,当用户使用 VPN 连接打开受保护的文档时,或当其计算机具有 IPv6 地址时。For example, when a user opening a protected document is using a VPN connection, or their computer has an IPv6 address.

可在文档跟踪站点中执行的操作是:Actions you can take in the document tracking site:

  • 如果你需要停止共享文档:If you need to stop sharing a document:

    • 单击“撤销访问权限”****。Click Revoke access. 请注意文档持续可用的时间段。Note the period of time that the document continues to be available. 决定是否通过提供自定义消息让用户知道你正在撤销对之前共享的文档的访问权限。Decide whether to let people know that you’re revoking access to the document you previously shared by providing a customized message. 撤销某个文档时,它并不会删除你共享的文档,但获得授权的用户无法再打开该文档:When you revoke a document, it doesn't delete the document that you shared, but authorized users can no longer open it:

      撤销文档跟踪站点中的访问图标

  • 如果你想要导出到 Excel:If you want to export to Excel:

    • 单击“导出到 CSV”****,方便随后修改数据,并创建你自己的视图和图形:Click Export to CSV, so that you can then modify the data, and create your own views and graphs:

      导出到文档跟踪站点中的 CSV 图标

  • 如果你想要配置电子邮件通知:If you want to configure email notifications:

    • 单击“设置”**** 并选择在访问该文档时是否通过电子邮件发送通知以及发送方式:Click Settings and select how and whether to be emailed when the document is accessed:

      在文档跟踪站点中配置电子邮件通知

  • 如果想要为其他人跟踪和撤销共享文档:If you want to track and revoke shared documents for others:

    • Azure 信息保护管理员可以单击管理员图标,在用户通过文档跟踪站点注册文档后,跟踪和撤销这些用户的受保护文档。Administrators for Azure Information Protection can click the Admin icon to track and revoke protected documents for users when those users have registered their documents with the document tracking site. 只有管理员才能看到该图标:Only administrators see this icon:

      文档跟踪站点中的“管理员”图标

      如果是全局管理员,但看不到此图标,则是因为你尚未分享任何文档。If you do not see this icon, despite being a global admin, it's because you haven't yet shared any documents. 在这种情况下,请使用以下 URL 访问文档跟踪站点:https://portal.azurerms.com/#/adminIn this case, use the following URL to access the document tracking site: https://portal.azurerms.com/#/admin

除非你是管理员,否则只能跟踪和撤销你所保护的文档。Unless you are an administrator, you can track and revoke only the documents that you have protected. 你无法通过使用文档跟踪站点来跟踪受保护的电子邮件。You cannot track your protected emails by using the document tracking site.

备注

如果你的管理员已为文档跟踪站点配置了隐私控制,你可能看不到你的组织中的用户访问你跟踪的文档的时间。管理员可以免除所有用户或仅为某些用户。If your administrator has configured privacy controls for the document tracking site, you might not see when users from your organization have accessed a document that you track. An administrator can exempt all users or just some users. 但是,你始终可以撤销对你所跟踪文档的访问权限。However, you can always revoke access to the documents that you track.

要跟踪已保护的文档,必须使用 Windows 计算机将其注册到文档跟踪站点。To track a document that you have protected, you must use your Windows computer to register it with the document tracking site. 为此,请使用文件资源管理器或 Office 应用程序。To do this, use either File Explorer, or your Office apps.

如果具有 Azure 信息保护客户端的当前通用版本,则在将bre-walkthrough-enabletracking参数与set-aipfilelabel cmdlet 结合使用时,还可以使用 PowerShell 注册受保护的文档。If you have the current general availability version of the Azure Information Protection client, you can also register the protected document with PowerShell when you use the EnableTracking parameter with the Set-AIPFileLabel cmdlet.

使用 Office 跟踪或撤销文档Using Office to track or revoke the document

对于 Office 应用程序(Word、Excel 和 PowerPoint):For the Office applications, Word, Excel, and PowerPoint:

  1. 打开要跟踪或撤销的受保护文档。Open the protected document that you want to track or revoke.

  2. 在 "主页" 选项卡上的 "保护" 组中,单击 "保护" " > 跟踪和撤销":On the Home tab, in the Protection group, click Protect > Track and Revoke:

    跟踪使用情况选项

    如果在 Office 应用程序中看不到这些选项,可能是由于以下原因之一:If you do not see these options in your Office applications, it’s likely to be because of one of these reasons:

    • 计算机上未安装 Azure 信息保护客户端。The Azure Information Protection client is not installed on your computer.

    • 必须重新启动 Office 应用程序。Your Office applications must be restarted.

    • 必须重新启动计算机才能完成安装。Your computer must be restarted to complete the installation.

有关如何安装 Azure 信息保护客户端的详细信息,请参阅下载并安装 Azure 信息保护客户端For more information about how to install the Azure Information Protection client, see Download and install the Azure Information Protection client.

使用文件资源管理器跟踪或撤销文档Using File Explorer to track or revoke the document

  1. 右键单击受保护的文件,然后选择“分类和保护”****。Right-click the protected file, and select Classify and protect.

  2. 从“分类和保护 - Azure 信息保护”**** 对话框中,选择“跟踪和撤销”****。From the Classify and protect - Azure Information Protection dialog box, select Track and revoke.

    从“分类和保护 - Azure 信息保护”对话框中跟踪和撤销图标

使用 Web 浏览器跟踪和撤销已注册的文档Using a web browser to track and revoke documents that you have registered

使用 Office 应用程序或文件资源管理器注册受保护的文档后,可以使用支持的 Web 浏览器跟踪和撤销这些文档:After you have registered the protected document by using your Office apps or File Explorer, you can track and revoke these documents by using a supported web browser:

  • 使用 Windows 电脑、Mac 计算机或移动设备,访问文档跟踪站点Using your Windows PC, Mac computer, or mobile device, visit the document tracking site.

    支持的浏览器:建议使用最低版本为10的 Internet Explorer,但你可以使用以下任一浏览器来使用文档跟踪站点:Supported browsers: We recommend using Internet Explorer that is at least version 10, but you can use any of following browsers to use the document tracking site:

    • Internet Explorer:最低版本 10Internet Explorer: At least version 10

    • 至少具有 2012 年 6 月 12 日发布的 Internet Explorer 累积安全更新 MS12-037 的 Internet Explorer 9Internet Explorer 9 with at least MS12-037: Cumulative Security Update for Internet Explorer: June 12, 2012

    • Mozilla Firefox:最低版本 12Mozilla Firefox: At least version 12

    • Apple Safari 5:最低版本 5Apple Safari 5: At least version 5

    • Google Chrome:最低版本 18Google Chrome: At least version 18

其他说明Other instructions

有关操作方法说明的详细信息,请参阅 Azure 信息保护用户指南:More how-to instructions from the Azure Information Protection user guide:

为管理员提供的其他信息Additional information for administrators

请参阅管理员指南中的配置和使用 Azure 信息保护的文档跟踪See Configuring and using document tracking for Azure Information Protection from the admin guide.