How do I stop AIP from automatically applying to PDFs?

Question

We enabled PDF encryption through Microsoft Azure Information Protection, but it turns out that it's not a good fit for us as it is too difficult for users outside of our organization to view or interact with PDFs we are sending them.

How do I turn this off?

If we so much as apply a Sensitivity Label with the scope of Email (not files) then it is still applying encryption to the PDFs. How do I make that stop?

Answer 1

Hi @Toni Calobrisi

Thanks for the question and using MS Q&A platform.
To remove the encryption, you need to disable the PDF protection feature in Azure Information Protection.

Here are the steps to follow:

1. Go to the Azure portal and navigate to the Azure Information Protection blade.
2. Select "Policies" and then click on "Advanced settings".
3. Look for the key "EnablePDFv2Protection" and set its value to "False".
4. Click "Save and close" to save the changes.

This should disable the PDF protection feature and remove the encryption from the PDFs.

Regarding your second question, if you are applying a sensitivity label with the scope of email and it is still applying encryption to the PDFs, you need to edit the sensitivity label and remove the encryption settings for the Email scope.

You can also try creating a new sensitivity label that does not apply encryption to PDFs and use that label for emails that contain PDF attachments.

For more details, please refer:
Using Azure Information Protection to protect PDF’s

How to remove sensitivity labels from PDFs automatically

I hope this helps! Let me know if you have any further questions.