使用者指南:使用 Azure 資訊保護統一標籤用戶端進行分類和保護User Guide: Classify and protect with the Azure Information Protection unified labeling client

*適用于Azure 資訊保護、Windows 10、Windows 8.1 Windows 8 **Applies to: Azure Information Protection, Windows 10, Windows 8.1, Windows 8*

如果您有 Windows 7 或 Office 2010,請參閱 AIP 和舊版 Windows 和 office 版本If you have Windows 7 or Office 2010, see AIP and legacy Windows and Office versions.

*適用于:適用于 Windows 的 Azure 資訊保護統一標籤用戶端*Relevant for: Azure Information Protection unified labeling client for Windows. 若為傳統用戶端,請參閱 傳統用戶端使用者指南。 *For the classic client, see the classic client user guide.*

注意

請使用這些指示,協助分類和保護您的文件和電子郵件。Use these instructions to help you classify and protect your documents and emails. 如果您只需要分類而不保護您的文件和電子郵件,請參閱僅分類指示If you need to only classify and not protect your documents and emails, see the classify-only instructions. 如果您不確定要使用的指示集,請洽詢系統管理員或技術支援中心。If you are not sure which set of instructions to use, check with your administrator or help desk.

將您的文件和電子郵件分類並加以保護的最簡單方式,是在您於 Office 傳統型應用程式 (WordExcelPowerPointOutlook) 中建立或編輯它們的時候。The easiest way to classify and protect your documents and emails is when you are creating or editing them from within your Office desktop apps: Word, Excel, PowerPoint, Outlook.

不過,您也可以使用 檔案總管 來分類並保護檔案。However, you can also classify and protect files by using File Explorer. 此方法支援其他檔案類型,而且是一次分類多個檔案並加以保護的便利方式。This method supports additional file types and is a convenient way to classify and protect multiple files at once. 這個方法支援保護 Office 文件、PDF 檔案、文字與影像檔,以及各種其他檔案。This method supports protecting Office documents, PDF files, text and image files, and a wide range of other files.

如果您的標籤將保護套用至檔,受保護的檔可能不適合儲存在 SharePoint 或 OneDrive 上。If your label applies protection to a document, the protected document might not be suitable to be saved on SharePoint or OneDrive. 檢查您的系統管理員是否已 在 SharePoint 和 OneDrive 中啟用 Office 檔案的敏感度標籤Check whether your administrator has enabled sensitivity labels for Office files in SharePoint and OneDrive.

安全地與組織外部的人員共用檔案Safely share a file with people outside your organization

受保護的檔案可以安全地與其他人共用。Files that are protected are safe to share with others. 例如,您將受保護的文件附加到電子郵件。For example, you attach a protected document to an email.

在您與組織外的其他人共用文件之前,請詢問技術支援中心或系統管理員,如何為外部使用者保護檔案。Before you share files with people outside your organization, check with your help desk or administrator how to protect files for external users.

例如,如果您的組織經常與其他組織中的人員通訊,您的系統管理員可能已設定會設定保護的標籤,讓這些人員可以閱讀及使用受保護的文件。For example, if your organization regularly communicates with people in another organization, your administrator might have configured labels that sets protection such that these people can read and use protected documents. 然後,選取這些標籤來分類及保護要共用的文件。Then, select these labels to classify and protect the documents to share.

或者,如果外部使用者有為他們建立的 企業對企業 (B2B) 帳戶 ,您可以使用 檔案總管來設定檔的自訂許可權 ,然後再共用它。Alternatively, if the external users have business-to-business (B2B) accounts created for them, you can use File Explorer to set custom permissions for a document before you share it. 如果您設定自己的自訂權限,且文件已受到僅供內部使用的保護,請先為該文件建立一份複本,以保留原始權限。If you set your own custom permissions and the document is already protected for internal use, first make a copy of it to retain the original permissions. 然後使用該複本來設定自訂權限。Then use the copy to set the custom permissions.

使用 Office 應用程式分類並保護文件和電子郵件Using Office apps to classify and protect your documents and emails

在 [ 首頁 ] 索引標籤中,選取功能區上的 [ 敏感度 ] 按鈕,然後選取其中一個已為您設定的標籤。From the Home tab, select the Sensitivity button on the ribbon, and then select one of the labels that has been configured for you. 例如:For example:

敏感度按鈕範例

或者,如果您已從 [敏感度] 按鈕選取 [顯示 列],就可以從 Azure 資訊保護列選取標籤。Or, if you have selected Show Bar from the Sensitivity button, you can select a label from the Azure Information Protection bar. 例如:For example:

Azure 資訊保護列範例

若要設定標籤(例如「機密 \ 所有員工」),請選取 [機密],然後選取 [所有員工]。To set a label, such as "Confidential \ All Employees", select Confidential and then All Employees. 如果您不確定要將哪一個標籤套用至目前的文件或電子郵件,請使用標籤工具提示來深入了解每個標籤,以及套用標籤的時機。If you're not sure which label to apply to the current document or email, use the label tooltips to learn more about each label and when to apply it.

如果標籤已套用至文件而您想要變更標籤,您可以選取不同的標籤。If a label is already applied to the document and you want to change it, you can select a different label. 如果您已顯示 Azure 資訊保護列,且標籤未顯示在您要選取的列上,請先按一下 [ 編輯標籤 ] 圖示,在 [目前的標籤] 值旁。If you have displayed the Azure Information Protection bar, and the labels are not displayed on the bar for you to select, first click the Edit Label icon, next to the current label value.

除了手動選取標籤以外,也能以下列方式套用標籤:In addition to manually selecting labels, labels can also be applied in the following ways:

  • 您的系統管理員已設定預設標籤,您可以保留或變更。Your administrator configured a default label, which you can keep or change.

  • 系統管理員設定的標籤會在偵測到機密資訊時自動設定。Your administrator configured labels to be set automatically when sensitive information is detected.

  • 系統管理員已在偵測到敏感性資訊時,設定建議的標籤,而且系統會提示您接受建議 (並將標籤套用) 或拒絕 (建議的標籤不會套用) 。Your administrator configured recommended labels when sensitive information is detected, and you are prompted to accept the recommendation (and the label is applied), or reject it (the recommended label is not applied).

敏感度按鈕的例外狀況Exceptions for the Sensitivity button

在 Office 應用程式中看不到 [敏感度] 按鈕嗎?Don't see the Sensitivity button in your Office apps?
  • 您可能未 安裝Azure 資訊保護的統一標籤用戶端。You might not have the Azure Information Protection unified labeling client installed.

  • 如果您在功能區上沒有看到 [ 敏感度 ] 按鈕,但改為看到具有標籤的 [ 保護 ] 按鈕,則會安裝 Azure 資訊保護的傳統用戶端,而不是 Azure 資訊保護統一標籤用戶端。If you don't see a Sensitivity button on the ribbon, but do see a Protect button with labels instead, you have the Azure Information Protection classic client installed and not the Azure Information Protection unified labeling client. 詳細資訊More information

您預期看到的標籤是否未顯示?Is the label that you expect to see not displayed?

可能的原因:Possible reasons:

  • 如果您的系統管理員最近為您設定新的標籤,請嘗試關閉 Office 應用程式的所有執行個體,並重新開啟 Office 應用程式。If your administrator has recently configured a new label for you, try closing all instances of your Office app and reopening it. 這個動作會檢查您的標籤變更。This action checks for changes to your labels.

  • 如果遺失的標籤套用保護,您的 Office 版本可能不支援套用 Rights Management 保護。If the missing label applies protection, you might have an edition of Office that does not support applying Rights Management protection. 若要確認,請按一下 [敏感度 說明 > 與意見 反應]。To verify, click Sensitivity > Help and Feedback. 在對話方塊中,檢查 [用戶端狀態] 區段中是否有訊息指出「此用戶端未取得 Office 專業增強版的授權」。In the dialog box, check if you have a message in the Client status section that says This client is not licensed for Office Professional Plus.

    如果您的 Office 應用 Microsoft 365 商務版 Microsoft 365 程式是在使用者獲指派 Azure Rights Management 的授權 (也稱為 Azure 資訊保護 Microsoft 365) ,則不需要 Office 專業增強版。You do not need Office Professional Plus if you have Office apps from Microsoft 365 Apps for Business or Microsoft 365 Business Premium when the user is assigned a license for Azure Rights Management (also known as Azure Information Protection for Microsoft 365).

  • 標籤可能位於不包含您帳戶的範圍原則中。The label might be in a scoped policy that doesn't include your account. 請向技術服務人員或系統管理員確認。Check with your help desk or administrator.

透過電子郵件安全地共用Safely sharing by email

當您透過電子郵件共用 Office 文件時,可以將文件附加至您保護的電子郵件,並且會使用套用至電子郵件的相同限制自動保護文件。When you share Office documents by email, you can attach the document to an email that you protect, and the document is automatically protected with the same restrictions that apply to the email.

不過,您可能會想要先保護檔,然後將它附加至電子郵件。However, you might want to protect the document first, and then attach it to the email. 如果電子郵件訊息包含機密資訊,也請保護電子郵件。Protect the email as well if the email message contains sensitive information. 在您將檔附加到電子郵件之前保護檔的好處是,您可以將不同的許可權套用至檔,而不是電子郵件訊息。A benefit of protecting the document before you attach it to an email is that you can apply different permissions to the document than to the email message.

使用檔案總管來分類並保護檔案Using File Explorer to classify and protect files

當您使用 [檔案總管] 時,您可以快速地分類並保護單一檔案、多個檔案或資料夾。When you use File Explorer, you can quickly classify and protect a single file, multiple files, or a folder.

當您選取資料夾時,在該資料夾中的所有檔案及任何子資料夾會自動選取使用您所設定的分類和保護選項。When you select a folder, all the files in that folder and any subfolders it has are automatically selected for the classification and protection options that you set. 不過,您在該資料夾中建立的新檔案或子資料夾不會自動設定使用那些選項。However, new files that you create in that folder or subfolders are not automatically configured with those options.

當您使用 [檔案總管] 來分類及保護您的檔案時,如果一或多個標籤呈現暗灰色,表示您選取的檔案不支援分類。When you use File Explorer to classify and protect your files, if one or more of the labels appear dimmed, the files that you selected do not support classification. 對於這些檔案,只有在您的系統管理員已設定標籤來套用保護時,您才可以選取標籤。For these files, you can select a label only if your administrator has configured the label to apply protection. 或者,您可以指定自己的保護設定。Or, you can specify your own protection settings.

某些檔案會自動從分類與保護中排除,因為變更這些檔案可能會讓您的電腦無法運作。Some files are automatically excluded from classification and protection, because changing them might stop your PC from running. 雖然您可以選取這些檔案,但是系統會將它們視為排除的資料夾或檔案而予以略過。Although you can select these files, they are skipped as an excluded folder or file. 範例包括可執行檔和您的 Windows 資料夾。Examples include executable files and your Windows folder.

系統管理員指南包含支援的檔案類型完整清單,以及自動排除的檔案和資料夾: Azure 資訊保護統一標籤用戶端支援的檔案類型The admin guide contains a full list of the file types supported and the files and folders that are automatically excluded: File types supported by the Azure Information Protection unified labeling client.

使用檔案總管分類並保護檔案To classify and protect a file by using File Explorer

  1. 在 [檔案總管] 中,選取您的檔案、多個檔案或資料夾。In File Explorer, select your file, multiple files, or a folder. 按一下滑鼠右鍵,並選取 [分類並保護]。Right-click, and select Classify and protect. 例如:For example:

    從檔案總管以滑鼠右鍵按一下 [分類並保護],使用 Azure 資訊保護來保護檔案

  2. 在 [分類並保護 - Azure 資訊保護] 對話方塊中,像您在 Office 應用程式中一樣使用標籤,它會依照您系統管理員的定義設定分類與保護。In the Classify and protect - Azure Information Protection dialog box, use the labels as you would do in an Office application, which sets the classification and protection as defined by your administrator.

    • 如果無法選取這些標籤 (呈現暗灰色):選取的檔案不支援分類,但是您可以使用自訂權限保護選取的檔案 (步驟 3)。If none of the labels can be selected (they appear dimmed): The selected file does not support classification but you can protect it with custom permissions (step 3). 例如:For example:

      [分類及保護 - Azure 資訊保護]** 對話方塊中沒有可用的標籤

  3. 您可以指定自己的保護設定,而不是使用您的系統管理員可能已包含在所選標籤中的保護設定。You can specify your own protection settings rather than use the protection settings that your administrator might have included with your selected label. 若要這麼做,請選取 [使用自訂權限保護]。To do this, select Protect with custom permissions.

    您指定的任何自訂權限不會取代您的系統管理員可能已在您所選標籤中定義的補充保護設定。Any custom permissions that you specify replace rather than supplement protection settings that your administrator might have defined for your chosen label.

  4. 如果您選取自訂權限選項,請立即指定以下項目:If you selected the custom permissions option, now specify the following:

    選項Option 描述Description
    選取許可權Select permissions 選取當您保護一或多個選取的檔案時,要提供給人員的存取層級。Select the level of access that you want people to have when you protect the selected file or files.
    選取使用者、群組或組織Select users, groups, or organizations 指定哪些人員應該具有您為一或多個檔案所選取的權限。Specify the people who should have the permissions you selected for your file or files. 請輸入人員的完整電子郵件地址、群組電子郵件地址,或是針對該組織中的所有使用者輸入組織的網域名稱。Type their full email address, a group email address, or a domain name from the organization for all users in that organization.

    或者,您可以使用通訊簿圖示,從 Outlook 通訊簿中選取使用者或群組。Alternatively, you can use the address book icon to select users or groups from the Outlook address book.
    存取權過期Expire access 請僅針對時間緊迫的檔案選取此選項,讓您指定的人員無法在您設定的日期後開啟選取的檔案。Select this option only for time-sensitive files so that the people you specified can't open your selected file or files after a date that you set. 您仍然可以開啟原始檔案,但在您所設定日期當天午夜過後 (以您目前的時區為準),您指定的人員將無法再開啟檔案。You will still be able to open the original file but after midnight (your current time zone), on the day that you set, the people that you specified will not be able to open the file.

    注意:如果先前已使用 Office 2010 應用程式的自訂許可權來設定此設定,則此對話方塊中不會顯示指定的到期日,但仍會設定到期日。Note:If this setting was previously configured by using custom permissions from an Office 2010 app, the specified expiry date does not display in this dialog box but the expiry date is still set. 這個顯示問題只有在 Office 2010 中設定到期日時才會發生。This is a display issue only for when the expiry date was configured in Office 2010.

    重要 事項: Office 2010 延伸支援已于2020年10月13日結束。Important: Office 2010 extended support ended on October 13, 2020. 如需詳細資訊,請參閱 AIP 和舊版 Windows 和 Office 版本For more information, see AIP and legacy Windows and Office versions.
  5. 按一下 [套用] 並等待「工作已完成」訊息,以查看結果。Click Apply and wait for the Work finished message to see the results. 然後按一下 [關閉]。Then click Close.

選取的檔案現在已根據您的選項分類並受到保護。The selected file or files are now classified and protected, according to your selections. 在某些情況下 (新增保護變更了檔案副檔名時),[檔案總管] 中的原始檔案被會取代為具有 Azure 資訊保護鎖定圖示的新檔案。In some cases (when adding protection changes the file name extension), the original file in File Explorer is replaced with a new file that has the Azure Information Protection lock icon. 例如:For example:

具有 Azure 資訊保護鎖定圖示的受保護檔案

如果您對分類和保護改變心意,或稍後需要修改設定,只要使用新的設定重複此程序即可。If you change your mind about the classification and protection, or later need to modify your settings, simply repeat this process with your new settings.

您指定的分類和保護會伴隨著檔案,即使您使用電子郵件傳送檔案,或是將它儲存到其他位置也一樣。The classification and protection that you specified stays with the file, even if you email the file or save it to another location.

其他指示Other instructions

Azure 資訊保護統一標籤用戶端的使用者指南中的其他作法指示:More how-to instructions from the user guide for Azure Information Protection unified labeling client:

系統管理員的其他資訊Additional information for administrators

請參閱 深入瞭解敏感度標籤See Learn about sensitivity labels.