user guide for enrolling device and protect documents ...€¦ · protect documents though azure...

Syed Sabih Haider Linkedin.com/in/syedsabhi

User Guide for

Enrolling device and

Protect Documents

Though Azure

Information

Protection for Apple

MacOs


Enroll your Apple Mac If you want to enroll your Mac book as a Mobile device in System Center Configuration Manager

(SCCM), so you should enroll your device as the given steps

Note: If you're using a macOS device at work, this means installing a Management Profile. This

is simply a file set up by your company support that loads settings and access information onto

your Mac.

Please follow the given steps to enroll your Mac book

1- On your Dock, find Safari and open a new window, then open the Company Portal

website.

2- Log into the Company Portal website with your work or school account. Like

([email protected])

3- After logging in, click on the Menu in the top left corner of the page and select My

Devices.

https://portal.manage.microsoft.com/

https://portal.manage.microsoft.com/


4- On the My Devices page, you will either see a list of enrolled devices or simply a banner.

This depends on if you already have a device enrolled, macOS or otherwise. To enroll a

device that is not listed, select the banner that says If your device is listed, tap here to

identify it. You can also tap here to enroll your device if it is not listed. If you don't

have any enrolled devices, the banner will read You don't have any devices enrolled.

Enroll this one by tapping here.

5- A popup window will appear with a brief explanation of why you are going to Identify or

enroll this device. Review this, then click Enroll to proceed.


6- A second popup window will appear with a brief explanation of what will happen when

you Enroll this device. Review this, then click Install to proceed.

7- System Preferences will open, and ask you if you want to Install "Management

Profile"? Click Install to proceed

8- A macOS popup window will appear. Confirm that you want to make changes by

providing your computer's User Name and Password, then clicking OK. This will install

the management profile onto your Mac.


9- You may see some additional messages from your Mac with more details about the

profile, or whether you're sure that you want to Install. Click Continue and Install

through these to proceed. Once the installation finishes, you will be able to view your

newly-installed Management Profile in the list of Device Profiles.


10- Go back to the Company Portal Site and check your device as if it is enrolled, maybe it

will be there without any name as given below. Select the device if it will recognize

correctly.


Here your device has been enrolled successfully as a Mobile Device Management in SCCM.


Azure Information Protection Control and help secure email, documents, and sensitive data that you share outside your company

walls. From easy classification to embedded labels and permissions, enhance data protection at all times

with Azure Information Protection—no matter where it’s stored or who it’s shared with.

Excluded file types: .lnk, .exe, .com, .cmd, .bat, .dll, .ini, .pst, .sca, .drm, .sys, .cpl, .inf, .drv, .dat,

.tmp, .msp, .msi, .pdb, .jar

Excluded folders:

o Windows

o Program Files (\Program Files and \Program Files (x86))

o \ProgramData

o \AppData (for all users)

You can find the step by step information in the following steps. Follow to achieve protection

1- First of all, download the RMS Sharing from the Apple Mac Store as given in below screenshot.

As I have already installed this App. Compatibility: OS X 10.9 or later, 64-bit processor


2- Open your Word or any other Microsoft Office Product, and then sign In into your Domain.com

account as I have signed In from [email protected]


3- Now from the upper tab Review Restrict Permission as given below. As you can see that

currently I have not assigned any restriction to my document.

4- Click on Restricted Access Option. It will authenticate your Credentials. Provide your

Organization Credentials.

5- Now the custom permission will pop up which Users can assign his/her own restrictions rather

than putting default restrictions which Administrator has made. You can mention your

organization or even out of your organization email address.

NOTE: This document will be opened by the specific users which you will mention here


6- Now check the other Restrictions.


7- Now put some Company Name-Confidential in the given document for testing as given below c

8- Now when We send this document to the other User, you will have the following behavior when

you open the document. Where you cannot copy, printed this document


Azure Information Protection for Emails

You can protect Emails through Information Protection

Follow the given steps to achieve the Protection of your Emails

1- First of all, we will make a restriction where the receiver will not be able to forward, print, and

copy content.

2- Add “Do not Forward” restriction to this Email


Receiver End Receiver will insert his/her Credentials to verify his identity. And then the email will open


Here in the given Screenshot you can see that you cannot Print, forward and copy content.


Some Other Use Cases for Email Protection


Online Behavior if you send Protected Document to User who is not using Outlook.

THE END