Additional requirements for installing the unified labeling client on enterprise networks

Before you install the Azure Information Protection unified labeling client on your enterprise network, check that computers have the required operating system versions and applications for Azure Information Protection: Requirements for Azure Information Protection.

Then, verify that you have the additional items required for installing the Azure Information Protection unified labeling client.

Microsoft .NET Framework requirements

The full installation of the Azure Information Protection unified labeling client by default, requires a minimum version of Microsoft .NET Framework 4.6.2.

If this framework is missing, the setup wizard from the executable installer tries to download and install this prerequisite. When this prerequisite is installed as part of the client installation, the computer must be restarted.

If you are installing the Azure Information Protection Viewer on its own, you must have a minimum version of Microsoft .NET Framework 4.5.2.

Disable Exploit protection (.NET 2 or 3 only)

The AIP client is not supported on machines with .NET 2 or 3 that have Exploit protection enabled.

In such cases, we recommend that you upgrade your .NET version.

If you must keep your .NET version 2 or 3, make sure to disable Exploit protection before installing the AIP client.

Windows PowerShell minimum requirements

The PowerShell module for the client requires a minimum version of Windows PowerShell 4.0.

If you're working on an older operating system, you may need to insall PowerShell manually. For more information, see How to Install Windows PowerShell 4.0.

Screen resolution requirements

Client machines with resolutions of 800x600 and lower can't fully display the Classify and protect - Azure Information Protection dialog box when you right-click a file or folder in the File Explorer.

Admin permissions

To install the Azure Information Protection unified labeling client, you must have local administrative permissions on the client computer.

Windows 10 requirements

For Windows 10 version 1809 only, operation system builds older than 17763.348, install March 1, 2019—KB4482887 (OS Build 17763.348) to ensure the Information Protection bar displays correctly in Office applications.

This update is not needed if you have Office 365 1902 or later.

Configure your group policy to prevent disabling AIP

For Office versions 2013 and later, we recommend that you configure your group policy to ensure that the Microsoft Azure Information Protection add-in for Office applications is always enabled. Without this add-in, users won't be able to label their documents or emails in Office applications.

For Word, Excel, PowerPoint, and Outlook, use the group policy setting list of managed add-ins documented in No Add-ins loaded due to group policy settings for Office 2013 and Office 2016 programs.

Specify the following programmatic identifiers (ProgID) for AIP, and set the option to 1: The add-in is always enabled.

Application	ProgID
Word	MSIP.WordAddin
Excel	MSIP.ExcelAddin
PowerPoint	MSIP.PowerPointAddin
Outlook	MSIP.OutlookAddin

Next steps

Continue with Admin Guide: Install the Azure Information Protection unified labeling client for users.

For more information, see:

• Client files and usage logging

• File types supported

• PowerShell commands