Encrypting Emails from Anywhere!

The Situation: So, you recently purchased Microsoft 365 E3/E5 (or EMS E3/E5) and have started rolling out your pilot of Azure Information Protection.  Everything is going great until one of your executives approaches you and wants to know how to protect emails from their phone/tablet while they are relaxing on the beach.  You could always…

2

The Saga of Hold Your Own Key (AIP Classification with AD RMS Protection)

The Situation: Azure Information Protection (AIP) is a powerful technology for Classifying and Protecting sensitive data which was designed around the cloud based Azure RMS service for protection.  This is great for new users of Microsoft Information Protection technologies as there is less investment in on premises servers that must be maintained and secured.  However,…

0

AIP Scanner++ (Discovering all the sensitive data)

The Situation: So, you know that you have terabytes of unstructured data on your file shares and document libraries but you are uncertain how much of it is actually sensitive and needs to be protected.  In the past, discovering sensitive data was time consuming and potentially costly using 3rd party solutions or a massive amount…

0

Creating Labels for Azure Information Protection

The Scenario: You are starting to implement Azure Information Protection and you need to create Labels and Sub-Labels so your users can see the new fancy buttons in their Office applications.  Often there are default labels to work from, but sometimes those labels have been removed or you simply want to create your own labels…

0

More Fun with the AIP Scanner (EMS E3/AIP P1 Capabilities)

The Scenario: So you recently read my post about configuring the Azure Information Protection Scanner and love the capabilities, but alas, you only have EMS E3/AIP P1 licensing so you can’t use the AIP Scanner since Automatic Labeling is an EMS E5/AIP P2 feature, right? Well, almost.  It has recently been brought to my attention…

0

AD RMS to AD RMS to Azure Information Protection Part 1

The Scenario: So, you have read my previous blog posts about AD RMS side-by-side migration and Enterprise Migration from AD RMS to AIP using SCCM but unfortunately both of those articles assume best case scenario for the original AD RMS cluster.  Sadly, that is not always the way things work.  In the real world, the…

0

The Enterprise Admin (unpleasant) Way to Add an AD RMS Service Connection Point

The Situation: You need to install a new AD RMS cluster in your environment because you got a nastygram from an auditor about not having your document libraries protected.  However, you have secured your environment against modern threats which means that your Enterprise Admin cannot log into one of those dirty Tier 1 servers (good…

0

Easy Configuration of the Azure Information Protection Scanner

The Scenario: The EU General Data Protection Regulation (GDPR) took effect on May 25, 2018 and marks a significant change to the regulatory landscape of data privacy.  ​The aim of the GDPR is to protect all EU citizens from privacy and data breaches in an increasingly data-driven world.  Organizations in breach of GDPR can be fined up…

0

AD RMS to Azure Information Protection: Enterprise Client Migration using SCCM Compliance Settings

The Scenario: Your management has just renewed their Microsoft Enterprise Agreement and bought a shiny new Office 365 E3 (or E5/EM+S/etc) and have been told wonderful things about how Azure Information Protection can enable them to securely collaborate with partners in the cloud.  They want this implemented yesterday (of course) so they can start sending protected…

3

AD RMS: Upgrade Migration with a Named SQL Instance

The Scenario: You read my previous article but it does not cover how to do an upgrade migration if you are moving to a new named instance in SQL.  Although it is very similar to the Version 2, there are some important call-outs if you want to have a pain free upgrade experience.  I have…

0