Label removal may not be possible due to AzureInfomationProtection version dependence or file dependence.

itcjapan 0 Reputation points
2023-12-15T05:40:00.1233333+00:00

We become indebted to.

I noticed a week ago that even if you try to remove the label from a file that is already protected by AIP, you may not be able to remove the label.

Apparently, it depends on the AIP version and the file and cannot be unlabeled.

Could you please tell me the cause and countermeasures?

The background, how to reproduce it, and the current situation are described below.

■Pattern 1

〇Environment
・Windows10 22H2
・AIP version 2.16.79.0

〇Error pattern 1.1

・Place a file that cannot be unlabeled on the local PC
・Right-click the target file
・"Classify and protect"
・The following error occurs
兵庫さんの分類して保護する

User's image

〇Error pattern 1.2
・Remove the label with Powershell Try Set-AIPFileLabel C:\Users\Username\Downloads\testtest.ptxt -RemoveLabel -JustificationMessage 'The previous label no longer applies'
・The following error is displayed FileName Status Comment


C:\Users\Username\Downloads\test2.pdf Failed Unable to identify error HRESULT: 0x80004005

Set-AIPFileLabel : Unable to identify error HRESULT: 0x80004005

At line:1 char:1

  • Set-AIPFileLabel C:\Users\Administrator.UNICEF\Downloads\test2.pdf -RemoveLabel -JustificationMessage 'The previous label no longer applies'
  • 
         + CategoryInfo : InvalidOperation: (C:\Users\Admini...loads\test2.pdf:String) [Set-AIPFileLabel], InformationProtectionException
    
         + FullyQualifiedErrorId : ErrorId,Microsoft.InformationProtection.Powershell.AIP.Commandlets.SetAIPFileLabelCommand
    
    

■Pattern 2

〇Environment
・Windows10 22H2
・AIP version 1.54.59

〇Error pattern 2.1
・Place the file that cannot be decrypted on the local PC
・Right-click the target file (the file whose label cannot be removed using pattern 1)
・Click "Microsoft.Azip.RightClick" (* If AIP is in this version, it will not be "classify and protect") - The following error will occur
User's image

鶴岡さんの分類して保護する2

〇 Notes
・"Files whose labels cannot be removed using pattern 1" cannot be removed even in the environment of pattern 2.
・Even if "a file other than the file whose label cannot be removed with pattern 1" can be removed with pattern 2, it cannot be done in the environment of pattern 1.
=> In the environment of pattern 1, you cannot remove labels from all files
=> In the environment of pattern 1, you can create a new text file and set a label, but you cannot delete the label - In the environment of pattern 2 Now, some files can be unlabeled.
・This applies not only to PDF files, but also to Excel files

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
519 questions
{count} votes

1 answer

Sort by: Most helpful
  1. itcjapan 0 Reputation points
    2024-02-06T00:21:14.9066667+00:00

    This issue has been resolved. ・The following steps were required to resolve the issue. ・Modernization of AIP client ・Set the following to the proxy  https://dataservice.protection.outlook.com/ Thank you for your help.

    0 comments No comments