Windows 10: .pfile not displaying in Azure Information Protection Viewer

CallumHynes1 · Oct 5, 2020

I have a .pfile, that i am trying to view, but whenever i put it through Azure Information Protection Viewer, it just says "This file type is not supported"

:)

Brink · Oct 5, 2020

Microsoft Information Protection MIP SDK Private Preview Update

Summary

Updating to this new build is required! Grab the latest here: Download Microsoft Information Protection Software Development Kit Version 1.7 from Official Microsoft Download Center

We've made some changes to the policy file that will break downlevel versions of the SDK. The new version is backward compatible. You'll want to update your SDK builds ASAP to prevent any issues!

Service components related to labeling are still being flighted only to non-production tenants. If you have a dev/test tenant that you'd like to enable for the labeling components, please fill out the form here: Microsoft Forms

Change List

Split Binaries/Libraries/Headers by API

Microsoft Information Protection Sync Service Preview

Third-Party app registration now supported!

Various performance, and stability updates

Operating System Support

In this version we're including functional support for the following platforms:

Debian 9

MacOS

RedHat Linux 7

Ubuntu 16.04

Windows Server and client (all supported versions)

iOS (UPE only)

Split Binaries/Libraries

Previous releases of the MIP SDK were monolithic - all three APIs were bundled into a single package and it was somewhat difficult to split them up. The good news is that we've now split them up for you, by API. This will help to reduce the size of applications which are using only the Policy or Protection APIs. The latest release is a zip that contains several other ZIPs and tarballs for the various supported platforms.

mip_sdk_API_PLATFORM_Version.[zip|.tar.gz]

File API on Ubuntu 16.04, for example, is: mip_sdk_file_ubuntu1604.0.4.456.0.tar.gz
Inside each archive, you'll find bins, headers, and samples.

MIP Sync Service

A new service component has been added that will allow third-party clients to authenticate and download policy. This new service is called the Microsoft Information Protection Sync Service.

The service itself requires no configuration or setup; it simply handles making all of the labels, protection settings, content marking, and other MIP-related policy settings available to SDK clients. The only area where this endpoint is exposed is in Azure Active Directory under the App Registration -> Required Permissions section. The SDK changes to utilize this endpoint, excluding app registration, are completely transparent and require only that you use the latest build.

Third-Party App Registration

Previously, a hard-coded client ID was required to test and develop with the SDK. We've completed the work to enable you to register your own Azure AD Applications and to provide those client IDs to the MIP SDK APIs.

To register your application, follow these instructions from the Azure AD docs: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-v1-integrate-apps-with-az...

Once the application has been registered, you'll then need to add permissions to the application. Update the application by following the steps detailed here, but using the API names listed in the table below.

Up to two APIs are required for the SDK, depending on which MIP SDK API you're using:

[table][tr]MIP SDK API Azure AD App Registration API [/tr] [tr][td]File[/td] [td]Microsoft Information Protection Sync Service Microsoft Rights Management Service[/td] [/tr] [tr][td]Policy[/td] [td]Microsoft Information Protection Sync Service[/td] [/tr] [tr][td]Protection[/td] [td]Microsoft Information Protection Sync Service (for pulling labels/template IDs) Microsoft Rights Mangement Service[/td] [/tr] [/table]

Native applications don't require any special work. Provide the client ID and resource, get a token for the services.

Web app / API applications are required to use certificate-based authentication. We will have samples on that available soon. For now, the best CBA sample can be found over at Azure Code Samples.

Support

The MIP SDK is still in public preview and is subject to preview support terms. The SDK is intended for non-production development and testing use only! We will announce general availability soon and at that time the SDK will be fully supported.
Click to expand...

Source: MIP SDK Public Preview September Update

Sanghati Barman · Oct 5, 2020

How to look at Windows Information Protection logs?

How can I look at Windows Information Protection logs?

More specifically, how can I look at the history of what Windows 10 allowed/prohibited from accessing private data?

My Windows 10 machine is enrolled with Intune and assigned to an Intune's app protection policy (MAM policy).

<FYI> https://docs.microsoft.com/en-us/intune/app-protection-policy

In this policy, I want to allow a Python program (Jupyter Notebook) to access private data within Windows 10 local disk. To do so, I need to specifically tell Intune exact Jupyter Notebook program files that try to access private data.

However, since I am not sure about specific Jupyter Notebook program files, I configured the Intune policy in "Silent" mode, which only records apps trying to access private data. When you look at this record/log, you'll get an idea what program files are
trying to access private data.

<FYI>https://docs.microsoft.com/ja-jp/in...rotection-policy-create#add-a-protection-mode

How can I look at Windows Information Protection logs?

According to Intune support, Azure/Intune does not record app protection history. Instead, Windows 10 might record app protection events, since Windows Information Protection is actually working to achieve the policy goals.
Click to expand...

You can check the logs through Event Viewer.

1. Click on Start menu and then type " Event Viewer ". Once find click on it to open it.

To view the WIP events in the Event Viewer

Open Event Viewer.

2. In the console tree under Application and Services Logs\Microsoft\Windows, click EDP-Audit-Regular and EDP-Audit-TCB.

Check the link for your reference.

How to collect Windows Information Protection (WIP) audit event logs (Windows 10) - Microsoft 365 Secuperty=

Brink · Oct 5, 2020

Microsoft Information Protection MIP SDK Private Preview Update

Summary

Updating to this new build is required! Grab the latest here: Download Microsoft Information Protection Software Development Kit Version 1.7 from Official Microsoft Download Center

We've made some changes to the policy file that will break downlevel versions of the SDK. The new version is backward compatible. You'll want to update your SDK builds ASAP to prevent any issues!

Service components related to labeling are still being flighted only to non-production tenants. If you have a dev/test tenant that you'd like to enable for the labeling components, please fill out the form here: Microsoft Forms

Change List

Split Binaries/Libraries/Headers by API

Microsoft Information Protection Sync Service Preview

Third-Party app registration now supported!

Various performance, and stability updates

Operating System Support

In this version we're including functional support for the following platforms:

Debian 9

MacOS

RedHat Linux 7

Ubuntu 16.04

Windows Server and client (all supported versions)

iOS (UPE only)

Split Binaries/Libraries

Previous releases of the MIP SDK were monolithic - all three APIs were bundled into a single package and it was somewhat difficult to split them up. The good news is that we've now split them up for you, by API. This will help to reduce the size of applications which are using only the Policy or Protection APIs. The latest release is a zip that contains several other ZIPs and tarballs for the various supported platforms.

mip_sdk_API_PLATFORM_Version.[zip|.tar.gz]

File API on Ubuntu 16.04, for example, is: mip_sdk_file_ubuntu1604.0.4.456.0.tar.gz
Inside each archive, you'll find bins, headers, and samples.

MIP Sync Service

A new service component has been added that will allow third-party clients to authenticate and download policy. This new service is called the Microsoft Information Protection Sync Service.

The service itself requires no configuration or setup; it simply handles making all of the labels, protection settings, content marking, and other MIP-related policy settings available to SDK clients. The only area where this endpoint is exposed is in Azure Active Directory under the App Registration -> Required Permissions section. The SDK changes to utilize this endpoint, excluding app registration, are completely transparent and require only that you use the latest build.

Third-Party App Registration

Previously, a hard-coded client ID was required to test and develop with the SDK. We've completed the work to enable you to register your own Azure AD Applications and to provide those client IDs to the MIP SDK APIs.

To register your application, follow these instructions from the Azure AD docs: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-v1-integrate-apps-with-az...

Once the application has been registered, you'll then need to add permissions to the application. Update the application by following the steps detailed here, but using the API names listed in the table below.

Up to two APIs are required for the SDK, depending on which MIP SDK API you're using:

[table][tr]MIP SDK API Azure AD App Registration API [/tr] [tr][td]File[/td] [td]Microsoft Information Protection Sync Service Microsoft Rights Management Service[/td] [/tr] [tr][td]Policy[/td] [td]Microsoft Information Protection Sync Service[/td] [/tr] [tr][td]Protection[/td] [td]Microsoft Information Protection Sync Service (for pulling labels/template IDs) Microsoft Rights Mangement Service[/td] [/tr] [/table]

Native applications don't require any special work. Provide the client ID and resource, get a token for the services.

Web app / API applications are required to use certificate-based authentication. We will have samples on that available soon. For now, the best CBA sample can be found over at Azure Code Samples.

Support

The MIP SDK is still in public preview and is subject to preview support terms. The SDK is intended for non-production development and testing use only! We will announce general availability soon and at that time the SDK will be fully supported.
Click to expand...

Source: MIP SDK Public Preview September Update

Windows 10: .pfile not displaying in Azure Information Protection Viewer

.pfile not displaying in Azure Information Protection Viewer

.pfile not displaying in Azure Information Protection Viewer

.pfile not displaying in Azure Information Protection Viewer

.pfile not displaying in Azure Information Protection Viewer - Similar Threads - pfile displaying Azure

Unlock RMS-Protected files with .PFILE extension

Unlock RMS-Protected files with .PFILE extension

PFILE DOSYASI NEDİR?

Azure AD sync information in Powershell/Event Viewer

Azure AD sync information in Powershell/Event Viewer

Azure AD sync information in Powershell/Event Viewer

NEED INFORMATION FOR DISK PROTECTION

NEED INFORMATION FOR DISK PROTECTION

Information in Microsoft Event Viewer