AIP REMOVAL

Question

AIP REMOVAL

Ferreira, Janio Procopio 1

Hi team.

I have been trying to remove AIP labels from E-mails or documents, using PowerShell commands through scripts, but it has not worked.

Does it anyone have face this issue before?

Ferreira, Janio Procopio 1 Reputation point

2022-12-14T21:36:34.497+00:00

Hi @Marilee Turscak-MSFT ,

I attached the script in one of your replies. You can see the script there which in a .txt.

I am trying to remove the labels from e-mails and office documents such as spreadsheets, word.

When I remove them manually, I just open each file individually and remove the labels in the file option.

We could have a call or something like that if it is easier.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-14T21:56:46.323+00:00

Got it. Looking into this and will follow up.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-14T22:08:35.72+00:00

We are looking into your script. In the meantime, could you please verify if you are able to remove the labels manually through Powershell? Also, you mentioned that the script processes, but the labels are still there. Are there any error messages that occur?

2 answers

Your answer

Ferreira, Janio Procopio 1 Reputation point

2022-12-14T21:36:34.497+00:00

Hi @Marilee Turscak-MSFT ,

I attached the script in one of your replies. You can see the script there which in a .txt.

I am trying to remove the labels from e-mails and office documents such as spreadsheets, word.

When I remove them manually, I just open each file individually and remove the labels in the file option.

We could have a call or something like that if it is easier.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-14T21:56:46.323+00:00

Got it. Looking into this and will follow up.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-14T22:08:35.72+00:00

We are looking into your script. In the meantime, could you please verify if you are able to remove the labels manually through Powershell? Also, you mentioned that the script processes, but the labels are still there. Are there any error messages that occur?

Answer 1

Marilee Turscak-MSFT 37,251 Microsoft Employee Moderator

Hi @Ferreira, Janio Procopio

Are you not able to process the removal/deletion of the labels at all, or does the delete appear to go through successfully, but then the label is reapplied (or still there) later? Can you clarify how/where you are trying to remove the labels and which file types these apply to?

It depends on the file type, but certain file types require different permissions to remove labels. For example, CSV files do not support native protection but only Generic protection. Their file extensions will change to .pfile after protection. To remove protection on a Pfile or open a Pfile protected file, the user should have Export permission, as AIP needs to extract the file and give it to the user as unencrypted.

Also, if you have a default label applied at the policy level, this is expected behavior.

If you remove the "default label” option from all your policies, you will not have a default label applied automatically and if there are no other labels/policies that label files automatically based on some conditions, then the users can have files without any labels. This way they will not be forced to have a specific label applied.

For more details, please see here under “What label policies can do”.

(Note in addition that if Unified Labeling is activated, you cannot make any changes from the AIP portal unless you have AIP portal Extended support.)

Let me know if any of these scenarios apply to you and if you have further questions.

-

If the information helped you, please Accept the answer. This will help us and other members of the community who might be researching similar issues. Otherwise let me know how I can further assist!

Ferreira, Janio Procopio 1 Reputation point

2022-12-12T14:40:16.003+00:00

Hi Marilee,

I have processed the files in an eDiscovery tool, but some of the files have AIP. After that, I extract all the files which have AIP for a machine then I use Super User and I script to remove the AIP from the files in PowerShell.

In summary, for some reason, the script is not working for the files.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-14T17:30:54.35+00:00

Thanks for clarifying! Can you share which script you are using and which types of files these are?
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-14T17:34:45.747+00:00

I've reached out to the product team for further troubleshooting but it would help to have those details as well. Do you receive any error or does the script process but the labels are still there?
Ferreira, Janio Procopio 1 Reputation point

2022-12-14T19:36:53.553+00:00

270704-decryptaip.txt
Ferreira, Janio Procopio 1 Reputation point

2022-12-14T19:39:16.867+00:00

Thank you for reach out to them.

I have tried other scripts that processed, but the labels were still there. I have to remove for it manually.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-14T21:27:36.23+00:00

Thanks @Ferreira, Janio Procopio . Could you please confirm which script you are using and which file types you are trying to remove? Also, when you remove them manually, do you do that under AIP > Delete label?
Ferreira, Janio Procopio 1 Reputation point

2022-12-15T13:34:56.993+00:00

Are you not able to process the removal/deletion of the labels at all, or does the delete appear to go through successfully, but then the label is reapplied (or still there) later? Can you clarify how/where you are trying to remove the labels and which file types these apply to?

A: I am not able remove the labels via script. I have to remove it manually with a Super User access. The label still even after running the script. I apply to EML, XLSX, DOCX.

I basically, connect to the environment via PowerShell, after that I use the super User command then I run the script to remove the labels. However, it does not remove any label applied.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-16T00:31:22.297+00:00

Thanks. Looking into your script and trying to repro.
Ferreira, Janio Procopio 1 Reputation point

2022-12-16T18:46:23.02+00:00

Thank you Marilee. I will wait for an update.
Marilee Turscak-MSFT 37,251 Reputation points Microsoft Employee Moderator

2022-12-29T17:33:31.76+00:00

Apologies for the delay over the holidays! We have been trying to test the script that you are using but the results are a bit inconclusive and taking into consideration that it is a custom one we may not be able to go further with that path. Were you able to confirm if you can perform the same actions manually using the Powershell cmdlets without the script?

Answer 2

Ferreira, Janio Procopio 1

Hi Marilee,

We have also tried to perform the same actions manually using PowerShell cmdlets, but we were not able to remove the labels automatically.

Share via

AIP REMOVAL

2 answers

Your answer