Azure Rights Management (Azure RMS) is an information protection solution for organizations that want to protect their data in today’s challenging working environment. These challenges include the need to be Internet-connected, with users bringing personal device to work, accessing company data on the road and home, and sharing sensitive. Get started using the Azure command-line tools for Mac and Linux. Azure Information Protection Better protect your sensitive information—anytime, anywhere. Follow the instructions at Download the Azure SDK for PHP to install the PHP client libraries for Azure and other useful tools. Azure Information Protection for Office 365 Protect corporate data by allowing more secure access to company resources and enabling safe sharing of sensitive information inside and outside your organization.

-->

Applies to: Active Directory Rights Management Services, Azure Information Protection, Windows 10, Windows 8.1, Windows 8, Windows 7 with SP1, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2*

Instructions for: Azure Information Protection client for Windows

The Azure Information Protection client (classic) is the original downloadable client for organizations that use Azure Information Protection to classify and protect documents and emails, or use a Rights Management service to protect their data. This client also has a viewer for organizations that don’t have their own information protection infrastructure but want to consume content that has been protected by other organizations that use a Rights Management service from Microsoft.

QBittorrent is a cross-platform, lightweight, well polished, and free of many issues. It’s also completely free from advertising and unwanted plugins, and has a focus on providing features the community needs which made it to #2 on our list of best torrent downloader for Mac. Torrent client for mac with scheduler. It is inherently very small but can be easily extended with third-party plugins available. It’s completely free, cross-platform, and supports things like encrypted downloads, private torrents, password protection, bandwidth scheduling and throttling, remote management via a web-based interface, proxy support etc.

Note

This client, also known as the classic client, is being replaced by the Azure Information Protection unified labeling client. If you're not sure which client to use, see Choose which Azure Information Protection client to use.

Use the following resources for the classic client:

Tip

There's also an Azure Information Protection app for iOS and Android. For more information, see FAQs for Azure Information Protection app for iOS and Android

For Mac computers: Use the RMS sharing app and read the FAQ for Rights Management Sharing Application for Mobile and Mac Platforms.

Install instructions

Azure information protection client for mac

Azure Information Protection (AIP) provides the ability to protect and classify information. For example, AIP policies can be created and used to classify, label, and protect data from leaking such as credit card numbers, social security numbers, or classify, label, and protect based off key words and so on.

For this post, I will not dive into details about how data protection, classification and labeling work, because there is already plenty of great documentation the teams at Microsoft provide out there on the web. Rather I will focus on logging and reporting. I’ll assume you’re already familiar with AIP or are using it today in some fashion.

If you’re interested in learning more about Azure Information Protection and what it can do for your organization, please visit: https://www.microsoft.com/en-us/cloud-platform/azure-information-protection

Within the Azure Information Protection umbrella we have a service called Azure Rights Management Services (Azure RMS). You’ll hear Azure Information Protection and Azure RMS terms interchanged, however I’ll stick with the term Azure RMS for the next section of the post.

Azure RMS

Azure RMS provides the ability to protect content, whether it’s an email or file. Azure RMS templates which contain content permissions such as blocking printing, forwarding, editing, and much more.

To learn more about Azure RMS please visit: https://docs.microsoft.com/en-us/information-protection/understand-explore/what-is-azure-rms

I encourage everyone to read through the Azure RMS FAQ as well because it will answer most questions: https://docs.microsoft.com/en-us/information-protection/get-started/faqs-rms

Assuming you have Azure RMS set up and your users are protecting content, the next stage is to learn about how to access the Azure RMS logs. Log entries are generated as users apply Azure RMS templates files, share protected content with users, and when users attempt to open Azure RMS protected content. Download horizon view client 4.

The following link does a very good job at walking through accessing Azure RMS log files: https://docs.microsoft.com/en-us/information-protection/deploy-use/log-analyze-usage

Once the logs are downloaded using the instructions provided in the previous link, use logparser (described within the link above) to consolidate the logs into a .CSV.

With a .CSV file full of Azure RMS log history we can create reports from it. We can create tables within Excel or use a cloud service such as Microsoft Power BI to import the logs into to create reports and dashboards or utilize Microsoft Log Analytics to upload the logs to create dashboards as well (more on Log Analytics in the next section).

For example, I imported the .CSV file to Power BI and created a report that shows Azure RMS protected documents and who accessed them:

I also created a Power BI report showing who shares the most Azure RMS protected files:

Lastly, I created a report to view when and what files were protected and shared:

The options are endless using services such as Microsoft Power BI and you can get as creative as you’d like with reporting and dashboards.

Classification and Labeling

Classification and Labeling provides users the ability to classify and label content. To learn more about classification and labeling and how to install the client please visit: https://docs.microsoft.com/en-us/information-protection/understand-explore/what-is-information-protection

I encourage everyone to read through the Azure Information Protection FAQ as well because it will answer most questions: https://docs.microsoft.com/en-us/information-protection/get-started/faqs-infoprotect

With classification and labeling, logging is localized to the Windows device via event viewer. Logging events occur when a user changes the classification label, for example changing a document labeled as confidential to personal. The classification profile I have configured requires a justification for changing the classification label and that justification is also logged in event viewer. However, having logs localized to a device makes it difficult to create a centralized report typically used for auditing or monitoring purposes. So, we must get creative with centralizing logging and reports for classification.

Azure Information Rights Management Client

Microsoft offers a service called Log Analytics (part of the Operations Management Suite or OMS) that will ingest logs from a variety of formats. Log Analytics is similar to a SIEM (Security Information and Event Management) system, some may even call it a SIEM.

To view more details on Log Analytics please visit: https://azure.microsoft.com/en-us/documentation/articles/log-analytics-overview/

Working with Log Analytics

I have a Windows client where I downloaded the Log Analytics agent to (as well as has the Information Protection client installed). To download the Log Analytics agent, sign into https://www.microsoft.com/en-us/cloud-platform/operations-management-suite (create a trial if you don’t already have a subscription) and select the “Settings” cog on the left, then “Connected Sources” and download the version of the agent that alig

Azure Information Protection Client For Mac