Microsoft 365 Information Protection & How it REALLY Works!

In this deep dive session Join us for a discussion and in-depth demo on Microsoft 365 / Purview Sensitivity labels. Otherwise known as Information Protection. This session will go deep into exactly what they are and also how they work. I’ll also take a look at how to deploy both manual & automatic policies in order to ensure that your data is protected
For more details on todays sponsor please visit attaininsight.com/directory-s...
Please vote for my channel as it’s been nominated for Best UK based KZbin channel on the UK Community awards 2023. Please vote here www.ukcommunityawards.co.uk/
I’ll also be speaking at ESPC 2023 in Amsterdam. 27-30th Nov. Details below.
For more on me visit Andymalone.org
Want more? Visit my Patreon Site Patreon.com/AndyMaloneMVP
Timecodes
00:00 Introduction
02:26 Important things to Know!
03:50 The Information Protection Scanner
04:22 Installing the Windows Information Protection Client
05:12 Introducing Just in Time Protection
05:52 Label Co-Authoring
06:30 Creating Information Protection Labels from Scratch
09:06 Label Settings
11:50 Label Permission & Encryption Settings
16:18 Working with Label Policies
20:26 Applying Labels in Documents
21:15 Automated label Policies
24:56 Conclusions

[@fordhamfamilyfarms]

Your the best I legit have a meeting about this in a few hours. ❤❤❤

[@fordhamfamilyfarms]

Just sounded so smart, thanks to you Andy 😂❤

[@AmitKumar-wq7gv]

Hi Andy..Its awesome video where you have briefed of AIP, also as in video It has been 24hrs now of the label that you published would be great If you can show how It appears for Groups and sites.. thank you.

[@AndyMaloneMVP]

Sure I think I did this recently on another video. But sure I can do it again sometime.

[@AmitKumar-wq7gv]

@@AndyMaloneMVP Thanks, request you to please share the viodeos on MS DLP as well or If has been already done please share the link.

[@giftysingla8841]

Hi Andy, Thank you posting this video with so much useful information. Please advise if users in my tenant has E3 license and I have E5 license in Admin portal, will those labels still apply to my users?

[@AndyMaloneMVP]

No

[@AndyMaloneMVP]

Labels will be applied, but users will not see them

[@ARadicalCut]

Hello Andy are all the features covered in this overview available in the M365 E5 license?

[@AndyMaloneMVP]

Yes

[@popatrick]

Hello Andy, What are the role groups needed to administer the compliance portal?

[@AndyMaloneMVP]

Compliance Administrator, Global Admin. Check out learn.microsoft.com

[@architdhandhania4923]

Hi Andy, what license should I purchase to have DLP in (endpoint + Email) and Edicovery for endpoints?

[@AndyMaloneMVP]

Generally I’d go for EM&S and E5

[@architdhandhania4923]

Thanks for your quick response, E5 is getting a bit expensive for our company. However, we can definitely explore the enterprise mobility + security E3 license.

[@architdhandhania4923]

Sorry to bother again, but i cant see ediscovery and DLP in enterprise and mobility E3

[@AndyMaloneMVP]

@@architdhandhania4923 there is also an EM&S for E3 as well but check what’s included first

[@gregoryigbinoba4778]

Question Andy, why the need for auto labeling when labeling is already applied and published ( which takes with 24hrs to appear in outlook)? we could just wait for 24hrs and don't have to set-up auto labeling.

[@AndyMaloneMVP]

This was an and / or demo. I showed all the options that you can use 😊

[@mbutterzmat]

Hi Andy, how do you unpublish a sensitivity label policy??

[@AndyMaloneMVP]

Remove the label from the document. Go to the policy remove the label and if necessary delete the policy.

[@jstump1972]

Do you know of any free resources out there on how to test\monitor\deploy sensitivity labels to a Large Healthcare company start to finish?

[@Friendlychicken2030]

Hire a pro and watch and learn

[@AndyMaloneMVP]

No sorry

[@chrismorganofficial]

Hi Andy, I would like to know if you could help me with this use case. 1. Client wants 3 labels Internal - Available only within the organisation 2. Public - Generally available to everyone 3. Confidential- This would be an auto label that detects SIT and also have encryption where the end user will have to input OTP Now if the partner wants to whitelist 75+ partner domains we can add this condition in the Internal label and it would avoid the partner domains from entering the OTP as this is what the customer wants to avoid the hassle of OTP. So my question is can we achieve both whitelisting domain partners and Auto-labelling without the partner domains having to enter the Otp?

[@AndyMaloneMVP]

You should take a look at Trainable Classifiers in Purview.

[@giftysingla8841]

can we enable autolabelling for files in file server

[@AndyMaloneMVP]

Check out the documentation and learn.microsoft.com for these hybrid solutions

[@bloodstallion]

Hi Andy, how can i enable sensitivity label for groups & sites. Option is greyed out

[@AndyMaloneMVP]

You need to enable it via PowerShell.

[@bloodstallion]

Hi Andy, could you please send me the powershell command for it. Thank u in advance

[@showaibatwork657]

AlgorithmiqueSupportForTheChannel

[@AndyMaloneMVP]

If only! YT is killing me at the mnoment.

[@giftysingla8841]

groups and sites is grayed out for me

[@AndyMaloneMVP]

You need to enable it via Power shell there is a link with a little! That explains what to do