AIP Scanner vs. AIP Client for Document Discovery on Servers
Question details
The user needs to understand whether to use the Azure Information Protection (AIP) scanner or the AIP client for discovering and labeling documents stored on Windows web servers.
- Product
- Azure Information Protection (AIP)
- Device & OS
- Windows Server
- Scenario
- Automating the discovery and protection of documents located in repositories on Windows web servers.
- Observed behavior
- Confusion regarding the proper deployment strategy, specifically whether installing the AIP client on a web server can replace scanner-based repository discovery.
Verify that your Windows servers expose supported repositories like shared folders (SMB) and ensure you have the appropriate administrative permissions for Microsoft Purview or Azure Information Protection.
Deploy the AIP Scanner for Server Repositories
Use the AIP scanner for automated server-side document discovery instead of the AIP client, which is designed exclusively for interactive end-user labeling.
The AIP scanner and AIP client serve entirely different purposes. The AIP scanner is designed to operate from a central server to automatically scan, discover, and label data at rest in network repositories such as file shares and SharePoint locations.
In contrast, the AIP client is built for end-user computers to allow individuals to manually classify and protect documents. Installing the AIP client on a Windows web server will not function as a replacement for automated repository discovery.
Review your Windows web servers to determine if they currently expose shared folders or other supported on-premises repositories.
If your web servers do not expose supported repositories, configure an accessible network file share (SMB) so that the central AIP scanner can reach and scan the stored documents.
Log into the Microsoft Purview compliance portal to deploy and configure the AIP scanner node, pointing it to the newly configured file shares for automated discovery.
Looking for a secure and lightweight Office suite?
While Azure Information Protection handles enterprise-level document discovery, you still need a reliable suite to create and edit those documents. WPS Office provides a highly compatible, secure, and lightweight alternative to Microsoft Office, perfect for managing your everyday files without heavy subscription costs.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package.
- 2. Install WPS Office: Run the downloaded setup file and follow the straightforward on-screen instructions to complete the installation.
- 3. Start Editing Securely: Launch WPS Office to instantly open, edit, and save your Office documents with high compatibility.
Frequently Asked Questions
Can I use the AIP client on a Windows Server to automatically scan local documents?
No, the AIP client is designed strictly for interactive use on end-user computers. To automate scanning and labeling of documents on server repositories, you must deploy the AIP scanner.
What types of repositories can the AIP scanner discover?
The AIP scanner is designed to discover, classify, and protect documents stored in on-premises network file shares (using SMB protocols) and SharePoint Server document libraries.
Is the AIP scanner included with Microsoft Purview?
Yes, the AIP scanner functionality is integrated into Microsoft Purview Information Protection, allowing you to extend your cloud-based labeling policies to on-premises data stores.
How should end-users protect their documents interactively?
End-users should protect documents interactively by installing the AIP client (or using the built-in sensitivity labels in modern Office apps) directly on their personal Windows desktops or laptops.
