Learn about built-in labeling and the AIP unified labeling client
Are you looking for Microsoft Information Protection? The Azure Information Protection unified labeling client is currently in maintenance mode. We recommend enabling Microsoft Information Protection's built-in labeling for your Office 365 applications. Learn more.
Sensitivity labels make it easier for your users to apply protection, and also provide classification so that you can track and manage your data.
The Azure Information Protection (AIP) unified labeling client can be installed over the built-in labeling solution for Microsoft Office, and provides extra features such as support for classifying and protecting files outside of Office using the File Explorer or PowerShell.
While the recommended solution is to use the built-in labeling provided by Microsoft Office 365, you may also continue to use the AIP unified labeling client for specific features it provides, such as support for the File Explorer and PowerShell, so that you can classify and protect files outside of office.
AIP client timelines
As we continue to bring the customer labeling and protection experience to built-in applications like Office 365, the Azure Information Protection unified labeling client has moved into maintenance mode as of January 1, 2022. Moving forward, no new features will be added to the unified labeling client.
Additionally, the we have retired the Azure Information Protection classic client and Label Management in the Azure Portal as of March 31, 2022. No further support is provided for the classic client and maintenance versions will no longer be released.
All current Azure Information Protection classic client customers must migrate to the Microsoft Information Protection unified labeling platform and upgrade to the unified labeling client.
We also recommend that you use the default labeling that's built-in to Office apps for the extra stability, better performance, and latest features. If you have the AIP unified labeling client installed, you'll need to disable the AIP add-in for Office apps.
For more information, see
Understand more about labeling solution options
Whether you are an existing customer with AIP unified labeling deployed, or a new customer looking for a labeling and protection solution, we recommend enabling built-in labeling for Office apps.
Built-in labeling provides more stability than the AIP add-in for Office apps, better performance, and the latest features, such as advanced classifiers.
Both built-in labeling and the unified labeling client use sensitivity labels and label policies downloaded from the Microsoft 365 compliance center. These label and policy settings can be shared by macOS, iOS, and Android.
Built-in labeling requires no extra installations and provides automatic updates. You only need a Windows computer with Microsoft 365 applications minimum version 1910. In contrast, the AIP unified labeling client requires a separate installation on each client machine.
If you already have the AIP unified labeling client installed, you'll need to disable it to use built-in labeling with Office apps. For more information, see the Microsoft 365 compliance documentation.
Use the AIP add-in for your Office apps only if:
- You've already deployed it to users and you need time to migrate them to built-in labeling.
- When users need a feature that isn't supported by built-in labeling.
You may also want to use the AIP unified labeling client for labeling features used outside of Office apps.
Updates for Microsoft Information Protection in Microsoft 365
Microsoft 365 is constantly developing new features for sensitivity labels with built-in labeling. We recommend checking for updates in the following locations:
- Feature parity for built-in labeling and the AIP add-in for Office
- What's new in Microsoft 365 compliance
- The Microsoft 365 Roadmap
The Rights Management client
The Rights Management Service (RMS) client provides protection only, and is automatically installed with some applications, including Office applications, the AIP unified labeling client, and RMS-enlightened applications from other software vendors.
- Extra support for recommended / automatic labeling. While the Azure Information Protection unified labeling client supports automatic labeling for built-in and custom sensitive info types, built-in labeling also supports other information types, such as trainable classifiers or sensitive info types that use Exact Data Match (EDM).
Labeling functionality outside of Office applications
Outside of Office applications, the AIP unified labeling client provides the following extra features:
- A scanner for on-premises data stores
- PowerShell labeling cmdlets
- Labeling with right-click options from the File Explorer
- A viewer for protected files, such as text, images, PDF, .pfile
For File Explorer and PowerShell commands, the user must be connected to the internet to protect files.
For more information, see Admin Guide: Install the Azure Information Protection unified labeling client for users.
Can AIP and built-in labeling function side-by-side?
Yes. We recommend that you use the built-in labeling solution for Office apps to benefit from features such as automatic updates and increased performance. You can also deploy the AIP unified labeling client across your network to use the additional File Explorer support, PowerShell cmdlets, and the AIP Viewer.
What's the difference between Azure Information Protection and Microsoft Information Protection?
Microsoft Information Protection is a framework for products and integrated capabilities that help you protect your organization's sensitive information. Azure Information Protection is only one of the Microsoft services that provide information protection.
Microsoft Information Protection products include:
- Microsoft 365 Information Protection, such as Microsoft 365 DLP
- Windows Information Protection
- Microsoft Defender for Cloud Apps
- Azure Information Protection
Microsoft Information Protection capabilities include:
- Unified label management
- End-user labeling experiences built into Office apps
- The ability for Windows to understand unified labels and apply protection to data
- The Microsoft Information Protection SDK
- Functionality in Adobe Acrobat Reader to view labeled and protected PDFs
For more information, see Information protection capabilities to help protect your sensitive data.
What's the difference between labeling with the built-in labeling solution and labeling with the AIP Office add-in?
Unlike the AIP Office add-in, the built-in labeling solution provided by Microsoft Information Protection is part of your Office applications, and will be maintained as part of the Office update strategy.
From a functional perspective, the feature parity section in the Microsoft 365 compliance documentation to understand the similarities and differences between the two services.
Keep the AIP client installed, but disabled in Office apps in order benefit from right-click options from the File Explorer, the AIP Viewer, PowerShell support, and the AIP scanner.
If you haven't yet enabled the built-in labeling solution for Microsoft 365, we recommend that you analyze the feature parity information in the Microsoft 365 compliance documentation and the Microsoft 365 roadmap for updates in the compliance center.
Disable the AIP add-in for Office apps to use built-in labeling across your network, with continued enhancements and a unified and streamlined customer experience.
For the extra features provided outside of Office apps, install and configure the Azure Information Protection unified labeling client. For more information, see: