Question

Contoso uses Microsoft 365 Apps for enterprise on all Windows 11 workstations. The security team has published sensitivity labels and wants users to apply them from within Word, Excel, PowerPoint, and Outlook desktop apps. They want the simplest supported configuration with the least additional software to install and maintain. What should you recommend?

Accepted Answer

Use the sensitivity labeling capability built into Microsoft 365 Apps for enterprise, which supports labeling natively without a separate add-in.

Answer

Deploy the Purview Information Protection client in add-in mode to every workstation so labels appear in the Office ribbon.

Answer

Install the Information Protection scanner on each workstation to apply labels to local Office files.

Answer

Configure Defender for Cloud Apps session policies to inject labeling controls into the Office desktop applications.