Additional requirements for installing the unified labeling client on enterprise networks


Are you looking for Microsoft Purview Information Protection, formerly Microsoft Information Protection (MIP)?

The Azure Information Protection unified labeling client is now in maintenance mode. We recommend you use labels that are built in to your Office 365 apps and services. Learn more

Before you install the Azure Information Protection unified labeling client on your enterprise network, check that computers have the required operating system versions and applications for Azure Information Protection: Requirements for Azure Information Protection.

Then, verify that you have the additional items required for installing the Azure Information Protection unified labeling client.


Not all of these requirements are verified by the installation software.

Microsoft .NET Framework requirements

The full installation of the Azure Information Protection unified labeling client by default, requires a minimum version of Microsoft .NET Framework 4.6.2.

If this framework is missing, the setup wizard from the executable installer tries to download and install this prerequisite. When this prerequisite is installed as part of the client installation, the computer must be restarted.

If you are installing the Azure Information Protection Viewer on its own, you must have a minimum version of Microsoft .NET Framework 4.5.2.


If a minimum version of Microsoft .NET Framework 4.5.2 is missing for the Viewer installation, the installation software does not download or install it.

Disable Exploit protection (.NET 2 or 3 only)

The AIP client is not supported on machines with .NET 2 or 3 that have Exploit protection enabled.

In such cases, we recommend that you upgrade your .NET version.

If you must keep your .NET version 2 or 3, make sure to disable Exploit protection before installing the AIP client.

Windows PowerShell minimum requirements

The PowerShell module for the client requires a minimum version of Windows PowerShell 4.0.

If you're working on an older operating system, you may need to insall PowerShell manually. For more information, see How to Install Windows PowerShell 4.0.


The installer does not check or install this prerequisite for you.

To confirm the version of Windows PowerShell that you are running, type $PSVersionTable in a PowerShell session.

Screen resolution requirements

Client machines with resolutions of 800x600 and lower can't fully display the Classify and protect - Azure Information Protection dialog box when you right-click a file or folder in the File Explorer.

Admin permissions

To install the Azure Information Protection unified labeling client, you must have local administrative permissions on the client computer.

Windows 10 requirements

For Windows 10 version 1809 only, operation system builds older than 17763.348, install March 1, 2019—KB4482887 (OS Build 17763.348) to ensure the Information Protection bar displays correctly in Office applications.

This update is not needed if you have Office 365 1902 or later.

Configure your group policy to prevent disabling AIP

For Office versions 2013 and later, we recommend that you configure your group policy to ensure that the Microsoft Azure Information Protection add-in for Office applications is always enabled. Without this add-in, users won't be able to label their documents or emails in Office applications.

For Word, Excel, PowerPoint, and Outlook, use the group policy setting list of managed add-ins documented in No Add-ins loaded due to group policy settings for Office 2013 and Office 2016 programs.

Specify the following programmatic identifiers (ProgID) for AIP, and set the option to 1: The add-in is always enabled.

Application ProgID
Word MSIP.WordAddin
Excel MSIP.ExcelAddin
PowerPoint MSIP.PowerPointAddin
Outlook MSIP.OutlookAddin

Next steps

Continue with Admin Guide: Install the Azure Information Protection unified labeling client for users.

For more information, see: