Thanks for another great video, you're helping me a lot to prepar the ms-102 Exam. If you remember I asked you about to restrict access to sharepoint access but in the video, with access conditional I think you only restrict the access to sharepoint not a only site. Thanks a lot and congratulations for your 5000 suspcriptors
Excellent content Peter! As a Purview-ist myself, i still get confused with the purpose of using which labelling method. A video on what to use when, for which use case would be great.
@@peterrisingM365 - Thank you for your reply. I just find the Purview experience quite inconsistent and disorientating (....and now there's a new portal !) We do a lot of client work, so what i'd like to be able to do is put a sensitivity label at the library level in the same way we can do with Records Management. Our client sites have multiple libraries (defined by Content Type) so library 1 would adopt sensitivity label A, library 2 would adopt label B and so on. I'm now creating SIT's but it just feels muddled to me. Any help or videos would be gratefully received.
Hi Peter. Many thanks for this! Did you figure out what the issue was with the 'open file in Office desktop app' message at 58:21. I'm experiencing a similar problem. When I do attempt to use labels in the desktop version, it errors with 'no logged on Office Users are configured for IRM'. My data is destined to remain highly unconfidential!
Ah has sussed it. Some of my labels were working, some were not. So I looked at the permissions. The ones not working were set as authenticated user permission as opposed to All users and groups in your org. Additionally, one of the labels was set to "Let user decide permissions" as opposed to "Assign Permissions now". That sorted it pretty quickly. Thanks for reminding me about this. I'll do a video covering this.
Thank you very much for this video. How do files with sensitivity labels applied to them behave when membership to the label is based on dynamic group? I have create a label and distributed it to a dynamic group. I have later tagged a word document with this label. At a later stage I also amended the dynamic group to include more users, however the new employees in the group never get access to the previous old word document. How does this work? I have waited a couple of days, still the behaviour is that new employees within the group still do not have access to old documents.
You should not have to manually apply the label to the word doc. It should auto label the doc when that doc is shared with the group. I may do a video on this topic very soon.
Thanks for the video. I am working one of the company and having issue on one of the user's office outlook sensitivity label is grayed out. Tried to edit the regedit label on security, repaired office, reinstall office. It doesn't helped. Do you have a fix on this issue.
I enjoyed this video. Very informative! Question: When you apply a policy with expiration of access - 50 days in your examples, what happens after that 50 days? Can the original creator still access it? Can that access period be extended? Refreshed? And if so how is that accomplished?
Thanks Richard. Been a while since I made this vid. MS recommendation is to set this setting to "Never", unless the content has a specific time-bound requirement. Must admit, I've never specifically tested what happens at the end of the scenario you present here - so I'd have to try it. May be a good one for a future video.
Very Informative and helpful. Dumb questions about where I am stuck. I created labels with Scope File and Email. Does the File Scope apply to files in OneDrive and SharePoint or local files on PCs? When I take my "Highly Confidential" Label and attempt to make an Auto-Labeling Policy, I am getting an error "Since this label contains Exchange specific actions, it cannot be used in SharePoint or OneDrive. Select another label or remove SharePoint and OneDrive." I tried to remove Exchange from the Auto Label Policy but am still getting the error. Does this mean I have to create Labels specific for Exchange and Specific for Files?
The File Scope for sensitivity labels in Microsoft 365 applies to files stored in OneDrive and SharePoint, as well as local files on PCs. Regarding the error you’re encountering with the “Highly Confidential” label, it seems that the label contains actions specific to Exchange, which is causing the conflict when you try to apply it to SharePoint or OneDrive. This is why you’re seeing the error message even after attempting to remove Exchange from the auto-labeling policy. To resolve this, you will indeed need to create separate labels: One label for Exchange (emails). Another label for files (OneDrive, SharePoint, and local files). This separation ensures that the specific actions and protections required for each type of content are correctly applied without conflicts
Hey Peter, this is really stuff thank you. If you are applying a label/label policy to different people/groups how do you stop one of the groups from removing the label? Is there certain rights in the label permissions that need to be excluded to prevent users from removing the label?
As far as I know, there is no way to distinguish - they will be able to change or remove the label if they are assigned via policy. However, that action will be audited and viewable in Activity Explorer
Hello Peter, Thanks for explaining this in detail. i created one policy before and it was implemented perfectly on sharepoint docs and desktop apps like Word. But lately i am getting error while selecting label in sharepoint docs or desktop apps such as MS word. The error is that"no logged on office users are configured for information Rights management(IRM). now i tried to create another following your video. it is not letting me create a label. its giving the error" Rights Management is not active for the tenant". can you please provide any advice on this?
Sounds like RMS has got turned off somehow, which is odd. Check out the suggestion in this article - www.spguides.com/rms-online-is-configured-for-this-tenant-but-is-turned-off/ to see if it is turned off, and if so, you can reactivate it,
@@peterrisingM365 yes, thanks. Also. in this video. i could see that you were having issues while applying labels to docs in Sharepoint (word for web). how did you solved it. i can apply labels in desktop app but when i tried to do in a doc which is in sharepoint group, it says (label not available in office on the web. and asks me to open desktop app). idk why it is showing this now. it was working before.
at 58:13 one suggestion - the issue with applying the label, this is most likely caused by co-authoring , by default co-authoring is not enabled for IRM the user must use desktop version of Word/Excel etc. this can also create conflicts within OneDrive sync.
Thank you for these thoughts. I have co auth on so perhaps it was the need for desktop version. I did get it working in the end actually and I linked to the solution in the video.
No afraid not. Business Premium is needed. You can see all the licence permutations here - learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#microsoft-purview-information-protection-sensitivity-labeling
Dear Peter, please confirm when the user provides a justification when he changes the label so that we can see an alert about why the user changes the label.
I'm not sure I entirely understand your question, but what happens when a user enters a justification is that this is recorded in Activity Explorer in the Purview Compliance portal. I hope this helps?
Ah, they were present originally - but I got some videos optimised by a UA-cam Marketeer a while back. He must have removed them. I'd suggest starting here - learn.microsoft.com/en-us/purview/sensitivity-labels and go through the links suggested next at the end of each page.
The content on Peter's channel is far better than those commercial ($$$$) training courses. May God bless you!
This is the nicest comment ever. Thank you so much!! 🙏🏻
@@peterrisingM365 wow, nice thank you very much for sharing very nice video
Thanks for another great video, you're helping me a lot to prepar the ms-102 Exam. If you remember I asked you about to restrict access to sharepoint access but in the video, with access conditional I think you only restrict the access to sharepoint not a only site.
Thanks a lot and congratulations for your 5000 suspcriptors
Ah cool, there is always a way in 365 I find. Thank you.
Very useful. Thank you, Peter!
You are most welcome!
Excellent content Peter!
As a Purview-ist myself, i still get confused with the purpose of using which labelling method. A video on what to use when, for which use case would be great.
Thank you so much. Do you mean when to choose assign permissions automatically, or let the users decide? That sort of thing?
@@peterrisingM365 - Thank you for your reply. I just find the Purview experience quite inconsistent and disorientating (....and now there's a new portal !)
We do a lot of client work, so what i'd like to be able to do is put a sensitivity label at the library level in the same way we can do with Records Management. Our client sites have multiple libraries (defined by Content Type) so library 1 would adopt sensitivity label A, library 2 would adopt label B and so on.
I'm now creating SIT's but it just feels muddled to me. Any help or videos would be gratefully received.
@@pmd7530 Good idea for a vid. From memory, you can apply labels to the library but been a while since I looked. I'll check it out for sure.
Hey Peter Good day. Content and information provided in your courses are very good as compared to those paid courses
Well thank you so much. That is really kind of you to say. I appreciate your support.
Very useful information, bro. Thank you for sharing.
It's a pleasure - thank you for you kind words and glad you found it useful.
wow, nice thank you very much for sharing very nice video
Well deserved sub + like, thank your for theses videos. Fun to follow!
Thank you so much!
Very useful information, thank you!
Glad it was helpful! 😀
Hi Peter. Many thanks for this! Did you figure out what the issue was with the 'open file in Office desktop app' message at 58:21. I'm experiencing a similar problem. When I do attempt to use labels in the desktop version, it errors with 'no logged on Office Users are configured for IRM'. My data is destined to remain highly unconfidential!
Hmm I don't think I ever came back to this. Let me see if I can figure it out.
Ah has sussed it. Some of my labels were working, some were not. So I looked at the permissions. The ones not working were set as authenticated user permission as opposed to All users and groups in your org. Additionally, one of the labels was set to "Let user decide permissions" as opposed to "Assign Permissions now". That sorted it pretty quickly. Thanks for reminding me about this. I'll do a video covering this.
@@peterrisingM365 Thanks for investigating Peter, I'll give this a try 👍
alright alright alright....good info😃!
Glad it's helpful.
Thank you very much for this video. How do files with sensitivity labels applied to them behave when membership to the label is based on dynamic group? I have create a label and distributed it to a dynamic group. I have later tagged a word document with this label. At a later stage I also amended the dynamic group to include more users, however the new employees in the group never get access to the previous old word document. How does this work? I have waited a couple of days, still the behaviour is that new employees within the group still do not have access to old documents.
You should not have to manually apply the label to the word doc. It should auto label the doc when that doc is shared with the group. I may do a video on this topic very soon.
Thanks for the video. I am working one of the company and having issue on one of the user's office outlook sensitivity label is grayed out. Tried to edit the regedit label on security, repaired office, reinstall office. It doesn't helped. Do you have a fix on this issue.
Sensitivity greyed out usually means there is no label policy assigned to the user. Have you checked that?
Great explanation !
Massively appreciate your support and kind words once again Rob. 😊
Hi Peter, Is it feasible to adjust the label order according to the group? Group 1 and Group 2 have different order of label.
Hey, which time in the video are you referring to please? It's been a long time since I filmed this one so will have to refamiliarise myself with it!
I enjoyed this video. Very informative!
Question: When you apply a policy with expiration of access - 50 days in your examples, what happens after that 50 days? Can the original creator still access it? Can that access period be extended? Refreshed? And if so how is that accomplished?
Thanks Richard. Been a while since I made this vid. MS recommendation is to set this setting to "Never", unless the content has a specific time-bound requirement.
Must admit, I've never specifically tested what happens at the end of the scenario you present here - so I'd have to try it. May be a good one for a future video.
Thank you very much
You are most welcome!
Very Informative and helpful. Dumb questions about where I am stuck. I created labels with Scope File and Email. Does the File Scope apply to files in OneDrive and SharePoint or local files on PCs? When I take my "Highly Confidential" Label and attempt to make an Auto-Labeling Policy, I am getting an error "Since this label contains Exchange specific actions, it cannot be used in SharePoint or OneDrive. Select another label or remove SharePoint and OneDrive." I tried to remove Exchange from the Auto Label Policy but am still getting the error. Does this mean I have to create Labels specific for Exchange and Specific for Files?
The File Scope for sensitivity labels in Microsoft 365 applies to files stored in OneDrive and SharePoint, as well as local files on PCs.
Regarding the error you’re encountering with the “Highly Confidential” label, it seems that the label contains actions specific to Exchange, which is causing the conflict when you try to apply it to SharePoint or OneDrive. This is why you’re seeing the error message even after attempting to remove Exchange from the auto-labeling policy.
To resolve this, you will indeed need to create separate labels:
One label for Exchange (emails).
Another label for files (OneDrive, SharePoint, and local files).
This separation ensures that the specific actions and protections required for each type of content are correctly applied without conflicts
Hey Peter, this is really stuff thank you.
If you are applying a label/label policy to different people/groups how do you stop one of the groups from removing the label?
Is there certain rights in the label permissions that need to be excluded to prevent users from removing the label?
As far as I know, there is no way to distinguish - they will be able to change or remove the label if they are assigned via policy. However, that action will be audited and viewable in Activity Explorer
Yes on each label you can set the rights to be different for the users / groups that you add.
great content.
Thank you for your kind support.
Hello Peter, Thanks for explaining this in detail. i created one policy before and it was implemented perfectly on sharepoint docs and desktop apps like Word. But lately i am getting error while selecting label in sharepoint docs or desktop apps such as MS word. The error is that"no logged on office users are configured for information Rights management(IRM). now i tried to create another following your video. it is not letting me create a label. its giving the error" Rights Management is not active for the tenant". can you please provide any advice on this?
Sounds like RMS has got turned off somehow, which is odd. Check out the suggestion in this article - www.spguides.com/rms-online-is-configured-for-this-tenant-but-is-turned-off/ to see if it is turned off, and if so, you can reactivate it,
@@peterrisingM365 It worked, thanks Peter. You're a savior.
@@harvey7241 Amazing - glad it worked for you!
@@peterrisingM365 yes, thanks. Also. in this video. i could see that you were having issues while applying labels to docs in Sharepoint (word for web). how did you solved it. i can apply labels in desktop app but when i tried to do in a doc which is in sharepoint group, it says (label not available in office on the web. and asks me to open desktop app). idk why it is showing this now. it was working before.
@@harvey7241 Ah yes, I documented the solution a few months ago in this video - ua-cam.com/video/AlB5OGogcsM/v-deo.html
Super Peter 🎉, Man 🏖️💥👌✨✨
Thank you. 😊
@@peterrisingM365 🤩
at 58:13 one suggestion - the issue with applying the label, this is most likely caused by co-authoring , by default co-authoring is not enabled for IRM the user must use desktop version of Word/Excel etc. this can also create conflicts within OneDrive sync.
Thank you for these thoughts. I have co auth on so perhaps it was the need for desktop version. I did get it working in the end actually and I linked to the solution in the video.
36:29 is pure gold 😂😂
Ha, how the hell did that happen?? 😂
I'm sure the original upload didn't do that.
hi peter, can i use sensitivity label with M365 business standard??
No afraid not. Business Premium is needed. You can see all the licence permutations here - learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#microsoft-purview-information-protection-sensitivity-labeling
Dear Peter, please confirm when the user provides a justification when he changes the label so that we can see an alert about why the user changes the label.
I'm not sure I entirely understand your question, but what happens when a user enters a justification is that this is recorded in Activity Explorer in the Purview Compliance portal. I hope this helps?
Please help- how can i restrict so that only few admin users can lower down sensitivity labels if file is marked confidential
This is to do with usage rights for the label. Take a look at - learn.microsoft.com/en-us/answers/questions/984906/to-prevent-removing-labels
Where are all the links from MS? I don't see them in the description..
Ah, they were present originally - but I got some videos optimised by a UA-cam Marketeer a while back. He must have removed them. I'd suggest starting here - learn.microsoft.com/en-us/purview/sensitivity-labels and go through the links suggested next at the end of each page.
Really good Peter. Thanks a lot :)
My pleasure!