在企业网络中安装统一标记客户端的附加要求Additional requirements for installing the unified labeling client on enterprise networks

适用范围:Azure 信息保护、Windows 10、Windows 8.1、Windows 8、Windows Server 2019、Windows Server 2016、Windows Server 2012 R2、Windows Server 2012***Applies to: Azure Information Protection, Windows 10, Windows 8.1, Windows 8, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012*

如果你有 Windows 7 或 Office 2010,请参阅 AIP 与旧版 Windows 和 OfficeIf you have Windows 7 or Office 2010, see AIP and legacy Windows and Office versions.

相关客户端:适用于 Windows 的 Azure 信息保护统一标记客户端Relevant for: Azure Information Protection unified labeling client for Windows. *对于经典客户端,请参阅经典客户端管理员指南For the classic client, see the classic client admin guide.

在企业网络中安装 Azure 信息保护统一标记客户端之前,请检查计算机是否有 Azure 信息保护所需的操作系统版本和应用程序:Azure 信息保护要求Before you install the Azure Information Protection unified labeling client on your enterprise network, check that computers have the required operating system versions and applications for Azure Information Protection: Requirements for Azure Information Protection.

然后,验证你是否有安装 Azure 信息保护统一标记客户端所需的附加项。Then, verify that you have the additional items required for installing the Azure Information Protection unified labeling client.

备注

并不是所有这些要求都由安装软件进行验证。Not all of these requirements are verified by the installation software.

Microsoft .NET Framework 要求Microsoft .NET Framework requirements

默认情况下,完全安装 Azure 信息保护统一标记客户端需要 Microsoft .NET Framework 4.6.2 及更高版本。The full installation of the Azure Information Protection unified labeling client by default, requires a minimum version of Microsoft .NET Framework 4.6.2.

如果缺少此框架,可执行安装程序中的安装向导会尝试下载并安装此必备组件。If this framework is missing, the setup wizard from the executable installer tries to download and install this prerequisite. 在客户端安装过程中安装此必备项后,将重启计算机。When this prerequisite is installed as part of the client installation, the computer must be restarted.

若要单独安装 Azure 信息保护查看器,则必须有 Microsoft .NET Framework 4.5.2 及更高版本。If you are installing the Azure Information Protection Viewer on its own, you must have a minimum version of Microsoft .NET Framework 4.5.2.

重要

如果安装查看器时缺少 Microsoft .NET Framework 4.5.2 及更高版本,那么安装软件不会下载或安装它。If a minimum version of Microsoft .NET Framework 4.5.2 is missing for the Viewer installation, the installation software does not download or install it.

禁用 Exploit Protection(仅 .NET 2 或 3)Disable Exploit protection (.NET 2 or 3 only)

使用 .NET 2 或 .NET 3 且已启用 Exploit Protection 的虚拟机不支持 AIP 客户端。The AIP client is not supported on machines with .NET 2 or 3 that have Exploit protection enabled.

在这种情况下,建议升级 .NET 版本。In such cases, we recommend that you upgrade your .NET version.

如果必须保留 .NET 版本 2 或 3,请务必在安装 AIP 客户端之前禁用 Exploit ProtectionIf you must keep your .NET version 2 or 3, make sure to disable Exploit protection before installing the AIP client.

Windows PowerShell 最低要求Windows PowerShell minimum requirements

客户端的 PowerShell 模块需要 Windows PowerShell 4.0 及更高版本。The PowerShell module for the client requires a minimum version of Windows PowerShell 4.0.

如果使用的是旧操作系统,可能需要手动安装 PowerShell。If you're working on an older operating system, you may need to insall PowerShell manually. 有关详细信息,请参阅如何:安装 Windows PowerShell 4.0For more information, see How to Install Windows PowerShell 4.0.

重要

安装程序不会为你检查或安装此必备组件。The installer does not check or install this prerequisite for you.

若要确认正在运行的 Windows PowerShell 的版本,请在 PowerShell 会话中键入 $PSVersionTableTo confirm the version of Windows PowerShell that you are running, type $PSVersionTable in a PowerShell session.

屏幕分辨率要求Screen resolution requirements

当你在文件资源管理器中右键单击文件或文件夹时,分辨率为 800x600 或更低的客户端虚拟机无法完全显示“分类和保护 - Azure 信息保护”对话框。Client machines with resolutions of 800x600 and lower can't fully display the Classify and protect - Azure Information Protection dialog box when you right-click a file or folder in the File Explorer.

管理员权限Admin permissions

若要安装 Azure 信息保护统一标记客户端,则必须在客户端计算机上拥有本地管理权限。To install the Azure Information Protection unified labeling client, you must have local administrative permissions on the client computer.

Windows 10 要求Windows 10 requirements

运行 Office 2010 的计算机需要客户端安装随附的 Microsoft Online Services 登录助手版本 7.250.4303.0。Computers running Office 2010 require Microsoft Online Services Sign-in Assistant version 7.250.4303.0, which is included with the client installation.

如果有更高版本的登录助手,请在安装 Azure 信息保护统一标记客户端之前卸载它。If you have a later version of the Sign-in Assistant, uninstall it before you install the Azure Information Protection unified labeling client.

例如,检查版本,并使用“控制面板” > “程序和功能” > “卸载或更改程序”来卸载登录助手。For example, check the version and uninstall the Sign-in Assistant by using Control Panel > Program and Features > Uninstall or change a program.

重要

Office 2010 外延支持已于 2020 年 10 月 13 日结束。Office 2010 extended support ended on October 13, 2020. 有关详细信息,请参阅 AIP 和旧版 Windows 和 Office 版本For more information, see AIP and legacy Windows and Office versions.

仅适用于 Windows 10 版本 1809,操作系统内部版本早于 17763.348,安装 2019 年 3 月 1 日—KB4482887 (OS 内部版本 17763.348) 以确保信息保护栏在 Office 应用程序中正确显示。For Windows 10 version 1809 only, operation system builds older than 17763.348, install March 1, 2019—KB4482887 (OS Build 17763.348) to ensure the Information Protection bar displays correctly in Office applications. 如果已有 Office 365 1902 或更高版本,则不需要此更新。This update is not needed if you have Office 365 1902 or later.

配置组策略以阻止禁用 AIPConfigure your group policy to prevent disabling AIP

对于 Office 版本 2013 及更高版本,建议配置组策略,以确保适用于 Office 应用程序的 Microsoft Azure 信息保护加载项始终是启用的。For Office versions 2013 and later, we recommend that you configure your group policy to ensure that the Microsoft Azure Information Protection add-in for Office applications is always enabled. 如果没有此加载项,用户将无法在 Office 应用程序中为其文档或电子邮件添加标签。Without this add-in, users won't be able to label their documents or emails in Office applications.

对于 Word、Excel、PowerPoint 和 Outlook,使用因 Office 2013 和 Office 2016 程序的组策略设置而没有加载加载项中记录的组策略设置“托管加载项列表”。For Word, Excel, PowerPoint, and Outlook, use the group policy setting list of managed add-ins documented in No Add-ins loaded due to group policy settings for Office 2013 and Office 2016 programs.

为 AIP 指定以下编程标识符 (ProgID),并将选项设置为“1: 始终启用加载项”。Specify the following programmatic identifiers (ProgID) for AIP, and set the option to 1: The add-in is always enabled.

应用程序Application ProgIDProgID
WordWord MSIP.WordAddin
ExcelExcel MSIP.ExcelAddin
PowerPointPowerPoint MSIP.PowerPointAddin
OutlookOutlook MSIP.OutlookAddin

后续步骤Next steps

继续学习管理员指南:为用户安装 Azure 信息保护统一标记客户端Continue with Admin Guide: Install the Azure Information Protection unified labeling client for users.

有关详情,请参阅:For more information, see: