支持 Azure Rights Management 数据保护的应用程序Applications that support Azure Rights Management data protection

适用范围:Azure 信息保护Office 365*Applies to: Azure Information Protection, Office 365*

相关内容:*AIP 统一标记客户端和 AIP 经典客户端Relevant for: AIP unified labeling client and AIP classic client.

此页上列出的应用程序和解决方案对 Azure Rights Management Service(简称 Azure RMS,为 Azure 信息保护提供数据保护)服务提供内置支持。The applications and solutions listed on this page have built-in support for the Azure Rights Management (Azure RMS) service, which provides data protection for Azure Information Protection.

这些应用程序和解决方案称为“启用 RMS”的应用程序和解决方案,通过使用 Rights Management API 将 Rights Management 和使用情况限制紧密集成。These applications and solutions are known as "RMS-enlighted", and have Rights Management and usage restrictions tightly integrated using Rights Management APIs.

备注

除非另行说明,否则支持的功能同时适用于 Azure RMS 和 AD RMS。Unless stated otherwise, the supported capabilities apply to both Azure RMS and AD RMS.

Windows 上启用 RMS 的应用程序Windows RMS-enlightened applications

类型Type 支持的应用程序Supported applications
Word、Excel、PowerPointWord, Excel, PowerPoint - Microsoft 365 应用- Microsoft 365 apps
- Office 2010- Office 2010
- Office 2013- Office 2013
- Office 2016- Office 2016
- Office 2019- Office 2019
- Office 网页版(查看受保护的文档)- Office for the web (viewing protected documents)
- Web 浏览器- Web browser
电子邮件Email - Outlook 2010- Outlook 2010
- Outlook 2013- Outlook 2013
- Outlook 2016- Outlook 2016
- Outlook 2019- Outlook 2019
- Microsoft 365 企业应用版中的 Outlook- Outlook from Microsoft 365 Apps for Enterprise
- Web 浏览器- Web browser
- Windows 邮件- Windows Mail
其他文件类型Other file types - Microsoft 365 应用、Office 2019 和 Office 2016 中的 Visio:.vsdm、.vsdx、.vssm、.vstm、.vssx、.vstx - Visio from Microsoft 365 apps, Office 2019, and Office 2016: .vsdm, .vsdx, .vssm, .vstm, .vssx, .vstx
- 适用于 Windows 的 Azure 信息保护客户端:文本、图像、pfile- Azure Information Protection client for Windows: Text, images, pfile
- 适用于 AutoCAD 的 SealPath RMS 插件:.dwg- SealPath RMS plugin for AutoCAD: .dwg

macOS 上启用 RMS 的应用程序macOS RMS-enlightened applications

类型Type 支持的应用程序Supported applications
Word、Excel、PowerPointWord, Excel, PowerPoint - Microsoft 365 应用,版本 16.40 或更高版本- Microsoft 365 apps, version 16.40 or later
- Office 2019 for Mac,版本 16.40 或更高版本- Office 2019 for Mac, version 16.40 or later
- Office 2016 for Mac,版本 16.16.27 或更高版本- Office 2016 for Mac, version 16.16.27 or later
- Office 网页版- Office for the web
- Web 浏览器- Web browser
电子邮件Email - Outlook 2019 for Mac,版本 16.40 或更高版本- Outlook 2019 for Mac, version 16.40 or later
- Outlook 2016 for Mac,版本 16.16.27 或更高版本- Outlook 2016 for Mac, version 16.16.27 or later
- Web 浏览器- Web browser
其他文件类型Other file types RMS 共享应用(查看受保护的文本、图像、常规受保护的文件)RMS sharing app (viewing protected text, images, generically protected files)

Android 上启用 RMS 的应用程序Android RMS-enlightened applications

类型Type 支持的应用程序Supported applications
Word、Excel、PowerPointWord, Excel, PowerPoint - 适用于 Android 的 GigaTrust 应用- GigaTrust App for Android
- Office 网页版- Office for the web
- Office Mobile(除非使用敏感度标签,否则仅限于查看和编辑受保护的文档)- Office Mobile (unless using sensitivity labels, limited to viewing and editing protected documents)
- Web 浏览器- Web browser
电子邮件Email - 9Folders- 9Folders
- Azure 信息保护应用(查看受保护的电子邮件)- Azure Information Protection app (viewing protected emails)
- BlackBerry Work- BlackBerry Work
- 适用于 Android 的 GigaTrust 应用- GigaTrust App for Android
- Citrix WorxMail- Citrix WorxMail
- NitroDesk- NitroDesk
- Outlook for Android- Outlook for Android
- Samsung Email(S3 及更高版本)- Samsung Email (S3 and later)
- TITUS Classification for Mobile- TITUS Classification for Mobile

- Web 浏览器- Web browser
其他文件类型Other file types Azure 信息保护应用(查看受保护的文本和图像)Azure Information Protection app (viewing protected text and images)

iOS 上启用 RMS 的应用程序iOS RMS-enlightened applications

类型Type 支持的应用程序Supported applications
Word、Excel、PowerPointWord, Excel, PowerPoint - GigaTrust- GigaTrust
- Office Mobile- Office Mobile
- Office 网页版- Office for the web
- TITUS Docs- TITUS Docs
- Web 浏览器- Web browser
电子邮件Email - Azure 信息保护应用(查看受保护的电子邮件)- Azure Information Protection app (viewing protected email)
- BlackBerry Work- BlackBerry Work
- Citrix WorxMail- Citrix WorxMail
- NitroDesk- NitroDesk
- iPad 和 iPhone 版 Outlook- Outlook for iPad and iPhone
- TITUS Mail- TITUS Mail
- Web 浏览器- Web browser
其他文件类型Other file types - Azure 信息保护应用(查看正在保护的文本和图像)- Azure Information Protection app (viewing protecting text and images)
- TITUS Docs:Pfile- TITUS Docs: Pfile

Windows 10 移动版上启用 RMS 的应用程序Windows 10 mobile RMS-enlightened applications

类型Type 支持的应用程序Supported applications
Word、Excel、PowerPointWord, Excel, PowerPoint - Office Mobile 应用(查看使用 Azure RMS 的受保护文档)- Office Mobile apps (viewing protected documents using Azure RMS)
- Web 浏览器- Web browser
电子邮件Email - Citrix WorxMail- Citrix WorxMail
- Outlook 邮件(查看受保护的电子邮件)- Outlook Mail (viewing protected emails)
- Web 浏览器- Web browser
其他文件类型Other file types 不支持Not supported

Blackberry 10 上启用 RMS 的应用程序Blackberry 10 RMS-enlightened applications

类型Type 支持的应用程序Supported applications
Word、Excel、PowerPointWord, Excel, PowerPoint - Web 浏览器- Web browser
电子邮件Email - Blackberry 电子邮件- Blackberry email
- Web 浏览器- Web browser
其他文件类型Other file types 不支持Not supported

有关启用 RMS 的应用程序的其他详细信息Additional details about RMS-enlightened applications

有关上面列出的启用 RMS 的应用程序表的详细信息,请参阅:For more information about the tables RMS-enlightened applications listed above, see:

查看电子邮件客户端中的受保护内容Viewing protected content in email clients

电子邮件客户端保护邮件时,附加到邮件且当前未受保护的所有 Office 文件将与电子邮件一起受到保护。When an email client protects a message, any Office files that are attached to the message, and are currently unprotected, are protected together with the email message. 在这种情况下,电子邮件和附件只能由经过授权的收件人在电子邮件客户端中查看。In such cases, both the email message and attachments can be viewed in the email client, by authorized recipients only.

但是,如果只有附件受到保护,而不是电子邮件本身,将无法在电子邮件客户端中预览附件,即使是由经过授权的收件人操作也是如此。However, if only the attachment is protected, but not the email message itself, the attachment cannot be previewed by the email client, even by authorized recipients.

提示

对于不支持保护电子邮件的电子邮件客户端,请考虑使用 Exchange Online 邮件流规则来应用此保护For email clients that don't support protecting emails, consider using Exchange Online mail flow rules to apply this protection.

受支持的文本和图像文件类型Supported text and image file types

除了 Office 文件和电子邮件,文件类型还包括文本和图像文件类型,其扩展名有 .txt、.xml、.jpg 和 .jpeg 等 。File types other than Office files and email messages include text and image file types, with extensions such as .txt, .xml, .jpg, and .jpeg.

这些文件在接受 Rights Management 提供的本机保护以后,会更改其文件扩展名,然后变为只读文件。These files change their file name extension after they're natively protected by Rights Management, and then become read-only.

不能进行本机保护的文件在接受 Rights Management 提供的常规保护以后,其文件扩展名为 .pfile。Files that cannot be natively protected have a .pfile file name extension after they are generically protected by Rights Management.

有关详细信息,请参阅受支持的文件类型For more information, see the File types supported.

Microsoft 365 应用支持Microsoft 365 app support

包括:Includes:

  • Office 应用,对于各更新通道中受支持的 Microsoft 365 应用版本表中列出的版本,从 Microsoft 365 商业应用版或 Microsoft 365 商业高级版,前提是已为用户分配了 Azure Rights Management(亦称为“适用于 Microsoft 365 的 Azure 信息保护”)许可证Office apps, for the versions listed in the table of supported versions for Microsoft 365 Apps by update channel, from Microsoft 365 Apps for Business or Microsoft 365 Business Premium, when the user is assigned a license for Azure Rights Management (also known as Azure Information Protection for Office 365)
  • Microsoft 365 企业应用版Microsoft 365 Apps for Enterprise

在 Office 网页版中查看受保护的文档Viewing protected documents in Office for the web

仅支持 Microsoft SharePoint 和 OneDrive,文档在上传到受保护的库之前不受支持。Supported only with Microsoft SharePoint and OneDrive, and the documents are unprotected before they are uploaded to a protected library.

Web 浏览器支持Web browser support

  • 使用 具有新功能的 Microsoft 365 邮件加密保护 Office 附件时,Web 浏览器支持 Word、Excel 和 PowerPoint文件Web browsers are supported for Word, Excel, and PowerPoint files, when the Office attachments are protected by using Microsoft 365 Message Encryption with the new capabilities.

  • 对于电子邮件,仅在以下情况下才支持 Web 浏览器:For emails, web browsers are supported only in the following scenarios:

    • 如果发件人和收件人均属于同一组织If both the sender and the recipient are part of the same organization
    • 如果发件人或收件人使用的是 Exchange OnlineIf the sender or recipient is using Exchange Online
    • 如果发件人使用的是混合配置中的本地 ExchangeIf the sender is using Exchange on-premises in a hybrid configuration

使用 Exchange ActiveSync IRM 的电子邮件客户端Email clients using Exchange ActiveSync IRM

以下电子邮件客户端使用 Exchange ActiveSync IRM,它必须由 Exchange 管理员启用:The following email clients use Exchange ActiveSync IRM, which must be enabled by the Exchange administrator:

  • Windows MailWindows Mail
  • 9Folders9Folders
  • 适用于 Android 的 GigaTrust 应用GigaTrust App for Android
  • NitroDeskNitroDesk
  • 适用于 Android 的 OutlookOutlook for Android
  • Samsung Email(S3 及更高版本)Samsung Email (S3 and later)
  • iPad 和 iPhone 版 OutlookOutlook for iPad and iPhone
  • Blackberry 电子邮件Blackberry Email

用户可以查看并答复所有受保护的电子邮件,但是不能保护新的电子邮件。Users can view, reply, and reply all for protected email messages but cannot protect new email messages.

如果电子邮件应用程序因 Exchange ActiveSync IRM 未启用而无法呈现邮件,当发件人使用混合配置中的 Exchange Online 或本地 Exchange 时,收件人可以在 Web 浏览器中查看电子邮件。If the email application cannot render the message because the Exchange ActiveSync IRM is not enabled, the recipient can view the email in a web browser when the sender uses Exchange Online, or Exchange on-premises in a hybrid configuration.

Office 的 Azure RMS 支持Azure RMS support for Office

Azure RMS 已紧密集成到 Word、Excel、PowerPoint 和 Outlook 应用中,在这些应用中,此功能通常称为信息权限管理 (IRM)。Azure RMS is tightly integrated into the Word, Excel, PowerPoint, and Outlook apps, where this functionality is often referred to as Information Rights Management (IRM).

另请参阅:Office 应用程序服务说明See also: Office Applications Service Description

用于信息权限管理 (IRM) 的 Windows 计算机Windows computers for Information Rights Management (IRM)

以下 Office 客户端套件支持使用 Azure Rights Management 服务保护 Windows 计算机上的文件和电子邮件:The following Office client suites support protecting files and emails on Windows computers by using the Azure Rights Management service:

  • Office 应用,对于各更新通道中受支持的 Microsoft 365 应用版本表中列出的版本,从 Microsoft 365 商业应用版或 Microsoft 365 商业高级版,前提是已为用户分配了 Azure Rights Management(亦称为“适用于 Microsoft 365 的 Azure 信息保护”)许可证Office apps, for the versions listed in the table of supported versions for Microsoft 365 Apps by update channel, from Microsoft 365 Apps for Business or Microsoft 365 Business Premium, when the user is assigned a license for Azure Rights Management (also known as Azure Information Protection for Office 365)

  • Microsoft 365 企业应用版Microsoft 365 Apps for Enterprise

    包含 Azure 信息保护中数据保护的大多数订阅(并非所有)都附带这些版本的 Office。These editions of Office are included with most but not all subscriptions that include data protection from Azure Information Protection. 检查你的订阅信息,确定是否包含适用于 Enterprise ProPlus 的 Microsoft 365 应用。Check your subscription information to see if Microsoft 365 Apps for Enterprise ProPlus is included. 你还可以在 Azure 信息保护数据表中找到此信息。You'll also find this information in the Azure Information Protection datasheet.

带 Office 专业增强版 2010 的 Azure Rights Management 服务和 Service Pack 2 或带 Service Pack 2 的 Office Professional 2010Azure Rights Management service with Office Professional Plus 2010 and Service Pack 2 or Office Professional 2010 with Service Pack 2

当你将 Azure Rights Management 服务与 Office Professional Plus 2010 和 Service Pack 2 或 Office Professional 2010 Service Pack 2 配合使用时,必须也具有适用于 Windows 的 AIP 客户端。When you use the Azure Rights Management service with Office Professional Plus 2010 and Service Pack 2 or Office Professional 2010 with Service Pack 2, you must also have the AIP client for Windows.

此外,此配置:Additionally, this configuration:

  • 在 Windows 10 上不支持。Is not supported on Windows 10.
  • 不支持联合用户帐户基于表单的身份验证。Does not support forms-based authentication for federated user accounts. 这些帐户必须使用 Windows 集成身份验证。These accounts must use Windows-Integrated Authentication.
  • 不支持使用通过 AIP 客户端选择的自定义权限替代模板保护。Does not support the ability to override template protection using custom permissions selected with the AIP client. 在此方案中,必须首先删除原始保护才能应用自定义权限。In this scenario, the original protection must first be removed before custom permissions can be applied.

用于信息权限管理 (IRM) 的 Mac 计算机Mac computers for Information Rights Management (IRM)

以下 Office 客户端套件支持使用 Azure RMS 保护 macOS 上的文件和电子邮件:The following Office client suites support protecting files and emails on macOS by using Azure RMS:

  • Microsoft 365 企业应用版Microsoft 365 Apps for Enterprise
  • Office Standard 2019 for MacOffice Standard 2019 for Mac
  • Office Standard 2016 for MacOffice Standard 2016 for Mac

所有版本的 Office for Mac 2019 和 Office for Mac 2016 都支持使用受保护的内容。All editions of Office for Mac 2019 and Office for Mac 2016 support consuming protected content.

提示

如果在 Mac 计算机上使用经典客户端,你可能会发现以下常见问题解答非常有用:如何配置 Mac 计算机以保护和跟踪文档?If you are using the classic client on a Mac computer, you might find the following FAQ useful: How do I configure a Mac computer to protect and track documents?

适用于 iOS 和 Android 的 Azure 信息保护应用Azure Information Protection apps for iOS and Android

当 iOS 和 Android 移动设备没有能够打开受保护电子邮件的电子邮件应用时,适用于 iOS 和 Android 的 Azure 信息保护应用将为受权限保护的电子邮件(.rpmsg 文件)提供查看器。The Azure Information Protection app for iOS and Android provides a viewer for rights-protected email messages (.rpmsg files) when these mobile devices don't have an email app that can open protected emails. 通过此应用还可以打开受权限保护的 PDF 文件、图片和文本文件。This app can also open rights-protected PDF files, and pictures and text files that are rights-protected.

如果已通过 Microsoft Intune 注册 iOS 和 Android 设备,用户可以从公司门户安装应用,你可以使用 Intune 的应用保护策略来管理应用。If your iOS and Android devices are enrolled by Microsoft Intune, users can install the app from the Company Portal and you can manage the app by using Intune's app protection policies.

适用于 Windows 的 Azure 信息保护客户端The Azure Information Protection client for Windows

若要使用 Azure 信息保护,必须在整个系统中部署 AIP 客户端。To use Azure Information Protection, you must deploy the AIP client across your system.

Microsoft Azure 信息保护页面下载统一标记客户端安装。Download the unified labeling client installation from the Microsoft Azure Information Protection page.

有关详细信息,请参阅:For more information, see:

AIP 经典客户端AIP's classic client

如果你尚未升级,则可能仍会部署旧版 Azure 信息保护经典客户端If you have not yet upgraded, you may still have the legacy Azure Information Protection classic client deployed.

有关部署和使用经典客户端的详细信息,请参阅:For more information about deploying and using the classic client, see:

备注

为了提供统一、简化的客户体验,Azure 门户中的 Azure 信息保护经典客户端和标签管理将于 2021 年 3 月 31 日弃用 。To provide a unified and streamlined customer experience, the Azure Information Protection classic client and Label Management in the Azure Portal are being deprecated as of March 31, 2021.

在此时间框架内,所有当前 Azure 信息保护客户都可以转换到 Microsoft 信息保护统一标记解决方案。This time-frame allows all current Azure Information Protection customers to transition to the Microsoft Information Protection unified labeling solution. 有关详细信息,请参阅官方弃用通知Learn more in the official deprecation notice.

权限管理共享应用Rights Management sharing app

对于 Mac 计算机,Rights Management 共享应用提供了一个查看器,可查看受保护的 PDF 文件 (.ppdf)、受保护的文本图像和受常规保护的文件。For Mac computers, the Rights Management sharing app offers a viewer for protected PDF files (.ppdf), protected text images, and generically protected files. 它也可保护图像文件,但不能保护其他文件。It can also protect image files, but not other files. 若要保护这些计算机上的 Office 文件,请使用 Office for Mac 或 Microsoft 365 企业应用版。To protect Office files on these computers, use Office for Mac or Microsoft 365 Apps for Enterprise.

有关详细信息,请参阅 适用于移动平台的 Microsoft Rights Management 共享应用程序的常见问题解答For more information, see the FAQ for Microsoft Rights Management Sharing Application for Mobile Platforms

Microsoft Azure 信息保护页上下载适用于 Mac 计算机的 Rights Management 共享应用。Download the Rights Management sharing app for Mac computers from the Microsoft Azure Information Protection page.

其他支持 Azure 信息保护的应用程序Other applications that support Azure Information Protection

除了上面列出的应用程序,支持 Azure Rights Management 服务的 API 的任何应用程序都可与 Azure 信息保护集成。In addition to the applications listed above, any application that supports the APIs for the Azure Rights Management service can be integrated with Azure Information Protection.

示例可能包括内部编写的业务线应用程序或软件供应商的应用程序(使用 RSM SDK 编写)。Examples may include line-of-business applications written in-house, or applications from software vendors, written using the RSM SDKs.

不受 Azure RMS 支持的应用程序Applications that are not supported by Azure RMS

Azure RMS 当前不支持的应用程序包括:Applications not currently supported by Azure RMS include:

  • Microsoft OneDrive for SharePoint Server 2013Microsoft OneDrive for SharePoint Server 2013
  • XPS 查看器XPS Viewer
  • 在早于 Windows 7 和 Service Pack 1 的 Windows 版本上运行的应用程序Applications running on Windows versions earlier than Windows 7, Service Pack 1

后续步骤Next steps

另请参阅:See also:

有关支持 Azure Rights Management 服务和 Azure 信息保护的解决方案的最新信息,请参阅博客文章 Microsoft Ignite 2019 - Microsoft 信息保护解决方案合作伙伴生态系统展示For the latest information about solutions that support the Azure Rights Management service and Azure Information Protection, see the blog post, Microsoft Ignite 2019 – Microsoft Information Protection solutions Partner ecosystem showcase.