Microsoft 365, Lock your data when user leaves even if copied (opens in new tab)

(betterlicenses.com)

4 pointsout_sider4y ago4 comments

4 comments

4 comments · 1 top-level

car_analogy4y ago· 3 in thread

I read this site, and skimmed https://docs.microsoft.com/en-us/azure/information-protectio... , and I still don't know how it works. If I copy a "protected" file to my disk, how can it block me from viewing it? Or, conversely, how does it allow me to view it? Are the files encrypted, and my computer would request a key from MS's servers? And Windows would apply some DRM to prevent me from intercepting the key, or copying the decrypted files from RAM?

out_siderOP4y ago

As for the AIP client I don’t know the technicals details on how it’s protected , but for the Information rights management in Sharepoint , the file will be encrypted on download and office apps will handle the decryption and making sure every 10 days you are able to login (have valid credentials) and won’t open if you don’t. It’s still possible to open the files , copy and paste on an unprotected file and save it on external storage and it will always be accessible, but this would mean a lot of work and most office users wouldn’t know they needed to do it.

out_siderOP4y ago

Btw, just read that Microsoft has stopped developping the client app used to encrypt files for the Azure Information Protection, concentrating in native integration on Office Desktop Apss (Information rights management in sharepoint). I've updated the blog post.

https://techcommunity.microsoft.com/t5/security-compliance-a...

nullfield4y ago

As is basic, the information can be extracted to a not-crippled (Office) program, at which point MS can ...

j / k navigate · click thread line to collapse

4 comments

4 comments · 1 top-level

car_analogy4y ago· 3 in thread

I read this site, and skimmed https://docs.microsoft.com/en-us/azure/information-protectio... , and I still don't know how it works. If I copy a "protected" file to my disk, how can it block me from viewing it? Or, conversely, how does it allow me to view it? Are the files encrypted, and my computer would request a key from MS's servers? And Windows would apply some DRM to prevent me from intercepting the key, or copying the decrypted files from RAM?

out_siderOP4y ago

As for the AIP client I don’t know the technicals details on how it’s protected , but for the Information rights management in Sharepoint , the file will be encrypted on download and office apps will handle the decryption and making sure every 10 days you are able to login (have valid credentials) and won’t open if you don’t. It’s still possible to open the files , copy and paste on an unprotected file and save it on external storage and it will always be accessible, but this would mean a lot of work and most office users wouldn’t know they needed to do it.

out_siderOP4y ago

Btw, just read that Microsoft has stopped developping the client app used to encrypt files for the Azure Information Protection, concentrating in native integration on Office Desktop Apss (Information rights management in sharepoint). I've updated the blog post.

https://techcommunity.microsoft.com/t5/security-compliance-a...

nullfield4y ago

As is basic, the information can be extracted to a not-crippled (Office) program, at which point MS can ...

j / k navigate · click thread line to collapse