Classifier Administration Server User Guide
Classifier Administration Server User Guide
Classifier Administration
Server
April 2022
Copyright Terms and Conditions
Copying Messages 59
Deleting Message 59
User Interface Library 60
Pre-configured UI Elements 60
Adding a New UI Definition 62
Viewing and Changing Properties of a UI Definition 62
Copying a UI definition 63
Deleting a UI Definition 63
General message options 63
Labelling Configurations 66
Add a Label Configuration 66
Renaming a Label 67
Deleting a Label 67
Selector Library 67
Active, Obsolete, and Retained Selectors and Values 68
Label Dominance 69
Adding a Single Selection List 70
Adding a Multi-Selection List 71
Adding a Text Entry Selector 73
Adding a Date Picker Selector 74
Adding a Date Offset List Selector 75
Editing Selectors 76
Making Selectors Obsolete/Restoring Selectors 77
Deleting a Selector 78
Marking Library 78
Adding a New Marking Format 79
Copying a Marking Format 82
Deleting a Marking Format 82
Content Library 82
Matchers 83
Defining Expressions 83
Content Checking User View 87
Condition Library 89
Add a New Condition 89
Editing Conditions 90
Copying Conditions 90
Deleting Conditions 90
Changing the Order of Condition Types 91
Supported Condition Types 91
List of Active Directory attributes supported by Active Directory Attribute Values of User 96
Data Classification Service Specific Conditions 96
Question Library 96
Adding a Question and Answer 97
Editing a Question and Answer 97
Deleting a Question and Answer 98
Copying a Question and Answer 98
Configuration Settings 98
Classifier Application Settings 99
General Settings 116
Label Locations 129
Combined Label Locations 132
Policies 134
Adding a New Policy 134
Defining Selectors and Values for Policies 138
Applying RMS Policy Notes 160
Azure RMS Support 160
Clearance Checks and Settings 166
Check Attachments/Recipients/Originator with Warn/Prevent parameters 166
Email Domain Clearance 167
Clearance Library 168
Dynamic Clearances 169
Clearance Checks When Sending Messages 170
Email, OWA, Mail Add-in, Notes and Mobile Differences 172
Differences in Enabling and Disabling 172
Propagating Labels
Classifier product architecture defines how products will operate to ensure that label information
applied under one Classifier application can be recognised and processed by another Classifier
application, or a suitable third party application.
Office Classifier stores label information in the properties of a document allowing other Classifier
applications to process the object according to the rules defined by the site.
Email Classifier, OWA, Notes and Mobile Classifier store label information in custom properties of
a message allowing other Classifier applications to process the object according to the rules
defined by the site.
Label Propagation includes the following configurable features:
l Use label values in templates as the initial label values for any derived item
l Recognise and use label values from a received message as the initial label value for any
reply or forward of that received message.
l The ability in Email, OWA, and Notes Classifier to ensure that the label associated with the
email message dominates all labels associated with any Classifier labelled attachments
(documents or messages; or for emails only, Portion Mark).
NOTE: Fore more information of how a Classifier application handles label values
assigned by another Classifier application, see Label Propagation Mechanisms on
page 207.
Printable Labels
Office Classifier allows label values to be stored as markings in a variety of document locations
that will appear when printed including:
l Header
l Footer
l Watermark (Word only)
l Field codes (Word only)
l Portion Mark (Word, PowerPoint and Excel)
Email, OWA, Mail Add-in, Notes and Mobile Classifier allow markings to be assigned to content
and/or properties that are normally included in printed material:
l FLOT
l LLOT
l Start and/or end of Subject
l Portion Mark
NOTE: Printing uses standard Outlook / OWA / Notes mechanisms. Therefore, if the
only label value on an email message is an X-Header, then any hard copy of the email
message will be unlabelled.
NOTE: For more information details of how a Classifier application handles label values
assigned by another Classifier application, see Label Propagation Mechanisms on page 207.
This appendix also covers files labelled by File or Power Classifier products.
Mandatory Selectors
Each Selector may be designated as Mandatory through application specific rules. See Policies
on page 134.
Mandatory selectors are indicated on the label selection interface by an asterisk ( * ). The asterisk
can be hidden.
A label value can be inserted as a field code in a Word document. It will use the Summary Marking
format. The feature is enabled/disabled using the Show 'Insert label' context menu setting.
This feature is designed for Administrators to create template documents with rich headers and
footers containing document label information.
To insert a field code:
1. Select a Label Value for the document using the label drop down selectors.
2. Navigate to where the field code should be inserted.
3. On the context menu (right mouse button), click Insert Label. The label value is placed at
the location of the cursor as a field code value.
In Excel, PowerPoint, Project or Word, when a label has been selected, a number of properties
relating to the Classifier label are stored in Document properties.
NOTE:
Visio does not support Custom Properties, and the Classifier Label value is held using a
different mechanism.
If you save a document as another type, the Classifier label information can be lost.
You can populate various standard document properties (Title, Author, Subject and
Keywords) that will be propagated if you save an Office document as PDF. However, Office
applications do NOT propagate any custom properties to the PDF, for example, the
bjDocumentSecurityLabel. Email, OWA and Notes Classifier will check defined label
locations for recognizable labels in standard PDF file properties for the Check for the high-
water mark and Add an attachment list rules.
1. Select File / Info and then choose Project Information / Advanced Properties .
2. Select the Custom tab.
For other Office 2013 applications along with Office 2016, 2019 and 365:
1. Select File / Info and then choose Properties .
2. Select the Custom Tab.
The private document properties maintained by Classifier are listed below. These properties
should not be modified by users or administrators:
When a message is saved or sent, any label value selected is stored in a custom property. Any
markings defined by applicable rules are stored in the relevant locations. The values stored may
be readily visible if they are in a visible location (for example, Subject), but others are not readily
visible (for example, x-headers).
The private properties maintained by the various Classifier mail applications should not be
modified by users or administrators, but are documented here for information purposes:
Use Of Templates
NOTE: This feature is not supported by OWA Classifier, Mail Add-in, Mobile or Notes
Classifier.
The Office applications allow you to create template files that can be used as the basis for new
documents.
You can set Classifier label values on these templates. When you subsequently create a new file
using a labelled template, Classifier uses the template label as the initial label value, rather than
using any default label setting.
If the template has no Classifier label value set, then the configured default label value (if any) will
be used.
Ribbon
You can enable/disable and set how various Ribbon settings are displayed.
To configure your Ribbon:
1. Select Labelling Configurations > Configuration Settings > General Settings.
2. To set how the ribbon is displayed, select a mode from Classifier ribbon layout mode.
3. To set where the Classifier label item will be within the ribbon, select an option from
Classifier ribbon group location.
4. If you want to remove Classifier options from the ribbon, enable the Remove Classifier
options from the ribbon bar.
NOTE:
In some circumstances (for example, Office 2013) the ribbon will not appear when a read only
document is opened until you choose Edit. For Outlook, you can use the Show Classifier on
ribbon when reading to hide the Classifier Ribbon entry when reading a message.
The dialog above shows the first (Single selection list) selector with Show value as set to Colour
and text and Display selector values as buttons option enabled, the second selector has the
option disabled, and that selector appears as a drop down selection list. Items are displayed in
columns and that the width of the 'column' is governed by the widest element.
The selector captions (Classification and Department) appear in the ribbon. To display these
selector captions:
1. Select Labelling Configurations > <configuration name> Policies > <policy name>.
2. From the Actions pane, select Properties.
3. Select Show selector captions on the ribbon.
The Favourites button in the example above will only appear if Display of Favourites button is
enabled. Favourites are not supported under OWA Classifier or the Mail Add-in.
The Portion Mark button shown in the example above will only appear if the option is enabled for
the current application. Portion Mark is not supported under OWA Classifier or Notes Classifier.
The Office ribbon limits the number of items that can be placed inside a group on the ribbon. If a
single/multi selector contains many values and is configured to be shown as buttons (or
checkboxes in the case of multi-select selectors), then Classifier may not display the items on the
ribbon. Instead the selector will need to be set via the label dialog. The limits are:
l If the policy contains at least one selector to be displayed as a button on the ribbon and no
selectors that are to be displayed as checkboxes on the ribbon, then Classifier can display
up to 150 items in the ribbon for the selector(s).
l If the policy contains at least one selector that is to be displayed as checkboxes on the
ribbon and no selectors that are to be displayed as buttons on the ribbon, then Classifier
can display up to 150 items in the ribbon for the selector(s).
l If the policy contains at least one selector that is to be displayed as buttons on the ribbon
and at least one selector that is to be displayed as checkboxes on the ribbon, then we allow
up to 100 items to be displayed
NOTE: The example above displays the standard operation. This is modified if you make use
of the Favourites, Recently Used Labels and Portion Marks, Single Click operation, or
Assisted Labelling operation or Tabs features. The presentation is slightly different under
OWA.
OWA
In an OWA environment, label selection and the standard label actions appear on an extended
message compose form.
Mail Add-in
In a Mail add-In environment, label selection and the standard label actions appear on an
extended message compose form.
The Classifier label interface is invoked using the Classifier button . The example below does
NOT have single click enabled.
NOTE: In a Notes environment, the current label setting is displayed, but the label value is set
via the configured Classifier label dialog if the Classify button is clicked.
Favourites
NOTE: This feature is not supported by OWA Classifier. Classifier Mail Add-in, Notes 8 and
Mobile Classifier.
You can use the Favourite Labels feature to remember their favourite label values (on that
workstation), and to choose the label value directly rather than choosing each selector value in
turn.
If applicable, the date/time stamp is updated to the current date/time every time you use the
Favourite.
To display Favourites:
NOTE: The Favourites and recently used values that appear in the menus are initially shown
using the marking format associated with the Custom format for Summary Markings.
You can:
l add current label to favourites
l organise and rename Favourites
l set current label as default rather than using any policy defined default. Default
Classification must be enabled. See Policies on page 134.
l select a Favourite label from the sub-list (e.g. Public Sales) - the label value then appears in
the main label selection display.
l Select a Recent label
Portion Mark
NOTE: This feature is not available under OWA Classifier, Notes Classifier, or Mobile
Classifier, and is not applicable to Visio and Project.
A Portion Mark is an abbreviated marking derived from a label value. For example, [P] for Public.
Availability of the feature is controlled by application specific options. If the Portion Marking
setting is enabled and has a valid Marking Format configured, then Portion Mark appears in the
Classifier label ribbon.
If the Recently Used Labels and Portion Marks feature is enabled, then the recently used portion
mark (label values) will appear as a sub-list.
You can:
The Recently Used Portion Marks is only relevant if Portion Marking is enabled in the application.
Label values are only added to the list of 'Recently used labels' when a message is submitted or a
document is saved. The selection of a label value does NOT update the list.
Recently used labels are available to the user under Favourites.
The administrator can use the Use Single Click with pre-defined labels feature to configure up to
twelve separate buttons, each with its own Label value, Caption, Tooltip, Colour, or Image that
replace the standard drop downs in the Classifier Label Ribbon. Single Click can be used in
conjunction with Assisted Labelling .
NOTE: The appearance will be modified according to whether other features such as
Favourites or Recently Used Labels and Portion Marks are in use. The matrix of single click
buttons displayed is affected by a windows re-size operation, so short captions are advisable.
The user sees the buttons configured, and selects the associated label by clicking the appropriate
button (Pub / Sales or Conf / Board in the Outlook example below, or Non-Business etc. in the
OWA example).
The user can select individual Selector values by clicking the Classifier label dialog box launcher
in Outlook, the Select Label button in OWA, to launch the Label Selection dialog.
NOTE: In Outlook, the dialog box launcher can be replaced by a button by enabling the
Display of Label Dialog launch button setting.
If single click is in use and the the user must select a Classification from the label selection dialog,
then an intermediate dialog may appear allowing a Single Click button to be clicked, or the full
label selection dialog to be invoked by clicking the 'Current Marking' button ( No Marking in the
example below).
The Continue button allows you to proceed without selecting a label value. The dialog above is
changed slightly if Display of Label Dialog launch button is Enabled.
Assisted Labelling can be configured to guide user selection of label values by limiting the
choices of selectors and/or selector values depending upon the value chosen for a preceding
selector.
The following shows a simple example of the user operation where selecting a value for the
category selector in the ribbon adds a second selector (Annotation) with the values of Annotation
being tailored according to the choice of Category.
Office Classifier
Initially the Classifier label shows only the category selector with no default value.
The presentation may vary if favourites or portion mark are configured to be available.
If Display selector values as buttons is enabled, this dialog might appear as:
Selecting Cat 3 will add the Annotation selector to the display and present the configured
Annotation values.
If there are more than three selectors or selector types that cannot be shown in the ribbon, then
the label selection button may appear as per the examples below depending upon space
utilisation within the window:
Selecting a value extends the label selection according to the configuration. In the example
below, selecting General Business has made Annotation available for selection.
Notes Classifier
Notes Classifier operates only in response to the Classify button, (there is no ribbon equivalent),
and for assisted labelling operations, the Label selection dialog is always presented showing the
relevant configured values for each selector.
Renaming selectors and selector values will be applied to any in use in the Decision Tree.
Therefore, renaming then switching back to the Decision Tree will show the new names in the
configured labels.
Changing selectors in the policy (unless prevented by the ‘in use’ check) will be reflected in the
label dialog in the Decision Tree editor. That is, the currently available selectors and values,
together with colours and captions, will be shown when the Add Label dialog (or its corresponding
Properties instance) is next opened.
NOTE: The Decision Tree in the client feature will not be available for Sent Item email
messages. The following images show examples of how the Decision Tree Dialog may
appear in the Client.
1. In the Message menu, select the Use Guidance icon. A Classification Guidance
window will appear.
2. The description will ask, What kind of message is it? Select an option in the list. Once the
option is selected a label will appear.
3. Click the OK button. The resulting label will be applied to the email.
When viewing messages in a folder, the classification value (if any) appears as follows:
Clicking the classification value displays the single click selection list:
Label Options
Email, Office and OWA Classifier present the standard label options menu.
There are some differences between Outlook and OWA as per the examples in Ribbon examples
.
This operation can be modified under Office Classifier using the Remove Classifier options from
the ribbon.
You can control whether this option appears using the Show labeller 'Clear' button setting.
Default
NOTE: For Notes Classifier this only appears on the label selection dialog. Not applicable
under Mobile Classifier. This action restores the label value to the default label values defined
by the policy.
You can control whether this option appears using the Show labeller 'Default' button setting.
This action will open the link configured in URL for your labelling help site. This action will be
unavailable (greyed) if the setting is not configured.
This action allows the user to re-instate the Summary Marking area. The action will only appear if
the following are all true:
l Show Summary Marking in task pane is Enabled
l Force Summary Marking in task pane is Disabled (Enabled means the summary marking
area cannot be closed).
l The user has closed the summary marking area that normally appears at the bottom of the
application window, AND the current environment does not provide another means of
restoring the summary marking area (e.g. Outlook provides an expand option after closure).
About Classifier
NOTE: Not available under Notes Classifier, Classifier Mail Add-in, nor Mobile Classifier.
Selecting About Classifier shows information about the installed Email or Office Classifier product
including the license state for that client, and configuration location etc.
If the Allow Folder View labelling is Enabled , the user has access to:
l A Label selected message(s) button when viewing a folder summary in Outlook (not
available under OWA)
l A Set Label... button when viewing an open message.
The ribbon may include an additional action (Show Label in the above) because there are either
selectors not visible on the ribbon (e.g. insufficient space, text selectors etc.) or assisted labelling
is in operation. Show label will show the current settings.
To label one or more messages in a folder:
1. Select the required messages and click Label selected message(s) . To change the label
on a message that is open, click Set Label.
In either case, the usual label selection dialog (Single Click if enabled) will appear allowing
choice of the label to be applied to the messages. The dialog will show the existing label of
the messages except if at least one message has a different label in which case the label
values are blank.
2. Select the required selector values and click OK to apply the change.
3. If you label a message AND a label change rule is triggered, then a standard policy check
dialog appears. If you use Label selected messages with multiple messages selected AND
more than one message triggers a label change rule, then a dialog appears enabling user
to select a message and then click Label selected message.
machine
l Publish Configuration - where your published configuration is stored to deploy to your
users
l Create Web Configuration - where a copy of your configuration is stored in a web-
supported format
l Test Mode - where a copy of your Test configuration is stored
Once your configuration is stable you need to publish it to make it available to the wider
community using either Active Directory or the file system. For an overview of these mechanisms,
see Deploying Configuration on page 175.
Every time you publish a configuration, an archive copy is stored locally as described in
Configuration Archives. The configuration space requirements are outlined in Estimating
Configuration Size on page 39.
NOTE: If you wish to publish the Classifier configuration via Active Directory then the Active
Directory Schema must be updated (see Extending the Active Directory Schema on page
205). A schema update is not required if you intend to publish the configuration via file store.
Publishing a configuration replaces any version previously stored in that location. To publish a
configuration:
1. Select the Classifier Administration node and choose Publish Configuration.
2. Select the Active Directory or File Store option as required.
If you choose File Store , the configuration is retrieved from the following registry setting:
HKEY_LOCAL_ MACHINE\SOFTWARE\Boldon James\Boldon James Classifier
Management WCF Service\ConfigPublishFolder.By default this points to
c:ProgramData\Boldon James\Config Publish Folder.
3. Enter a Publish reason and click OK. The OK button is disabled until you enter a Publish
Reason . The text entered will appear in the event log entry that records the publication.
4. NOTE: You may receive an error if the Single Click is enabled but does not contain
button definitions, and if no connected selectors are configured in Connect Selectors -
Assisted Labelling.
5. Click OK.
NOTE: Each time you publish a configuration, an archive copy is stored locally. See
Configuration Archives on page 36 for full details.
NOTE:
l Publishing to Active Directory requires particular permissions that may not be available
by default to Domain Administrators on systems other than the Domain Controller. See
Permissions for Publishing to AD on page 37 for details of the permissions required.
l If you publish the configuration to file store you must ensure that the target (master)
location has suitable permissions. End users should have the ability to read from that
location and administrators that are to modify the master configuration must also have
the ability to write to that location using the network path.
l Changes made to the Classifier configuration must be published to ensure that
Classifier environments access the updated information.
l OWA Classifier only changes its configuration after a restart. Thus after publishing an
updated configuration, an IISRESET would be required to cause OWA Classifier to use
that new configuration.
l SharePoint Classifier only picks up changes to the configuration after a restart or
recycle of the website where SharePoint Classifier WCF service is installed. This is
done through Internet Information Services or on the command line through the
Microsoft provided tool.
l Email and Office Classifier only pick up updated configuration on application restart. It
is advisable to restart all applications (Outlook, Word, Excel etc.) to avoid applications
using different versions of the configuration.
l Users of File Classifier must Logoff/logon to pick up changes to the published
configuration. This is because explorer.exe stays running in the background (using the
Classifier configuration available at the start) even if the user closes the Explorer
window.
Configuration Archives
NOTE: The files in a configuration should NOT be edited manually - the configuration is
signed, and almost any change invalidates the configuration.
The archive copies mean that it is possible to manually roll back to an earlier configuration as
follows:
1. Choose the archive to which you wish to revert.
2. The contents of description.txt (...ConfigurationArchives\n\Label Configurations\<Classifier
test>\description.txt) can be checked for the publish reason associated with that archive -
the publish reason supplied appears at the end of each entry made to the file.
3. Delete the current contents of the ConfigImportFolder Configuration folder (Label
Configurations, Management and Messages).
4. Copy the same folders (Label Configurations, Management and Messages) from below the
relevant archive and into the configuration folder.
5. Get Server Configuration.
6. Check that the restored configuration is the one you want.
NOTE: Housekeeping and backup of these archive folders is a matter for the user.
10. Click OK and then ensure Include inheritable permissions from this object's parent is
checked on the previous dialog.
11. Click OK on subsequent dialogs to complete the sequence.
l Delete Subtree
l Modify permissions
l Modify Owner
l All validated writes
l Create all child objects
l Delete all child objects
l Create account objects
l Delete account objects
Publication to Active Directory maps each folder and file to an individual object in Active Directory,
and requires base-64 encoding for image files. This encapsulation process incurs an overhead.
The impact on the Active Directory (the NTDS.dit file typically found in the Windows\ntds folder)
can be estimated using the following:
A typical Classifier configuration contains about 15 folders and 16 files; plus 1 folder and 7 files
per policy; plus however many image files are added. With no image files and a single policy the
configuration within Active Directory would typically be less than 300 Kb.
Once you have completed configuration of a policy (including the Label UI and Rules) you should
check that the policy produces the desired effect for the end user. The Publish Test Configuration
action facilitates this without disturbing the deployed configuration.
NOTE:
If you just wish to see how the label selection interface will look for a policy, you can use the
Label Preview action rather than starting an application after Publish Test Configuration.
There is a Test mode auditing setting that can be used to stop the capture of audit information
when Publish Test Configuration is invoked.
To test a configuration:
1. Establish a configuration that you wish to test.
2. Establish a folder in a suitable location into which test configurations can be published (e.g.
\\ICS-DC- 1\TestMode. This needs to be a file store folder:
l that can be written to by the Classifier Administration Service (and by the user under
3. Select > Configuration Folder Paths, and enter the folder locations. Click OK.
4. Select Classifier Administration > Publish Test Configuration and provide a name for the
sub-folder that will hold the test configuration, and a reason for the publication.
5. Click OK.
5. See Test Mode Administration on page 40 for details of how to use the test configuration.
1. Ensure that the relevant base applications (e.g. Microsoft Office) are installed and working.
2. Ensure that Email and Office Classifier is installed.
3. Ensure that Classifier Test Mode Administration is installed (this is a separately installable
item that can be found in the TestModeAdministration folder under the Classifier
Administration installation structure.
4. Ensure that none of the Classifier applications (Word etc.) is running.
5. Run Classifier Test Mode Administration.
6. Define the location containing the test configurations (e.g. \\ICS-DC-1\TestMode). The
dialog is updated to show the available test configurations.
6. Select the required Test Configuration and click Run Test .
7. If the configuration contains multiple polices, select the policy to be used.
This test sequence will temporarily set specific registry settings that direct Classifier
applications to use the chosen test configuration and policy, rather than any deployed
configuration.
8. Start the applications to be tested.
A dialog shows the currently active (Classifier) applications.
9. Once you have checked the Classifier functionality, close all open affected applications (for
example, Word andOutlook).
10. Click End Test Mode on the Classifier Administration Policy Test dialog. When the
applications are restarted, they revert to standard operation.
Locking/Unlocking Configuration
Use the Lock Configuration action to indicate to other Classifier administrators that the
configuration should not be published at the moment (for example, because configuration
changes are incomplete). If the configuration is locked, the Unlock Configuration action is
displayed and the Publish Configuration action is inhibited.
Classifier clients and Classifier Management Agent retrieve master configuration updates from
the location defined using Classifier Configuration Settings. These may point to a file store
location, Active Directory, or a URL location.
For more detailed information about registry keys and entries, see the Classifier Registry Keys
Deployment and Troubleshooting Guide.
Before you start, ensure you have an established Classifier configuration.
If Classifier Management Agent is to be used, then you have already deployed the Classifier
Management Agent version 3.8.1 or later BUT configured to retrieve the master configuration
from the Active Directory or File Store, (that is, you have established the relevant registry entries
described in the Classifier Management Agent Guide.
To retrieve a configuration from a URL by Classifier Management Agent:
Application Settings
Application Settings apply to all users in the site that have Classifier functionality installed or
which control the availability of Administration functionality.
The list of settings appears in a table with alternative setting values ( Enabled / Disabled ) that you
can select from a drop down list available when you select the current value.
The settings supported are summarised in the table below. Changes will only take effect after
policy changes have been deployed and affected applications have been restarted.
Setting Description
AutoDesk CAD (These options only appears if the relevant component license
Dassault DraftSight has been applied).
Allows you to Enable / Disable CAD Classifier operation for the
specific application post installation.
Clearance check If enabled, the Email Domain Clearance features of Classifier
Email Domains Administration are available. Email Domain Clearance is
supported by Email, OWA and Notes Classifier. See Clearance
Checks and Settings on page 166 for details.
If Disabled, the Email Domain Clearance features are NOT
available within Classifier Administration
Clearance Library Enabled - The Clearance Library features of Classifier
Administration are available. Clearance Library entries are used
by SharePoint Classifier. See Clearance Checks and Settings
on page 166 for details.
Disabled - The Clearance Library features are NOT available
within Classifier Administration
Maximum file size Defines the maximum size file (in KB) that File Classifier will
for icon overlay (in attempt to generate an icon overlay for. If no value is set the file
KB) size is unlimited.
l Type: integer (stored as string in config)
l Default Value: Not set, which means no restriction to
supported file size.
Microsoft Excel Enable / Disable for each individual application.
Microsoft Excel for
Mac Microsoft The Classifier functionality for an application can be activated
Outlook using this setting ( Enable / Disable ). Any Classifier
configuration associated with application is retained unchanged
Microsoft Outlook for even if the setting id disabled.
Mac Microsoft
PowerPoint The Mac options only appear if a suitable Classifier for Mac
Microsoft license has been applied.
PowerPoint for Mac
Microsoft Project
(2010 onwards only)
Microsoft Visio
(2010 onwards only)
Microsoft Word
Microsoft Word for
Mac
NOTE: There is no Enable/Disable setting for Outlook Web Access (OWA Classifier) or (Lotus)
Notes Classifier as these are Enabled / Disabled by server based Installation / Removal in
conjunction with a component license.
Auditing
Audit settings allow the administrator to control which operations are audited by applications that
have Classifier capabilities. Some settings may apply to most applications (e.g. Open), others are
only pertinent to a subset of the applications (e.g. Send is not applicable to documents – sending a
document will invoke Outlook which will take notice of this setting). Some actions are not audited
because of environment limitations (e.g. Save is not audited by OWA). Each setting takes the
value Enabled or Disabled.
Enabling this option audits if File Classifier changes the label on an item.
File label Audit when file labels are removed.
removal
NOTE: Only available if File Classifier is licensed.
Enabling this option audits if File Classifier removes a label from an item.
If the Label Folder View setting is Enabled, Email Classifier audits any
use of the Folder View Labelling feature, recording the new label value,
and any previous label value.
Open event Audit the Open action in Classifier-enabled Office applications. Enabling
this option audits if an existing classifier document is opened
Print event Audit the Print action in Classifier-enabled Office applications. Enabling
this option audits if a request is made to print an object. (This setting is
not supported by Visio, Outlook, nor OWA ).
Save event Audit the Save action in Classifier-enabled Office applications. Enabling
this option audits if an object is saved. Note that this will also be triggered
by any background automatic Save actions (This setting is not supported
by OWA Classifier). Email Classifier will audit saving of Draft messages,
Outlook msg and template formats, but other formats including Html and
Word docs are not audited.
Send event Audit the Send action in Classifier-enabled Office applications. Enabling
this option audits if Outlook sends a message.
Classifier Checks
Setting Description
Attachment Audit the outcome of checking the labels of attachments against that
Check of the containing message.
Enabling this option audits if a rule applying this check succeeds or
fails – e.g. An attachment is found with a label not dominated by the
message label.
Author label Audit the outcome of performing an author label change check.
change check Enabling this option audits if a Check for Author label change rule
succeeds or fails – i.e. The 'Author' tries to change the value of a label
element when this is inhibited by such a rule for Office applications.
Content check Audit when the user uses content checking. Enabling this option
audits if a Content Checking rule is actioned. That is when a message
Subject, Body or Attachment contains a 'checked for phrase'. The
audit entry will contain the groups checked, the element (Subject /
Body / Attachment) that contained a 'checked for phrase'.
Default label Audit when the default label check is triggered. Enabling this option
check audits every time the configured Default Label Check rule is actioned.
Disable reply to Audit the outcome of performing a message disable reply to all check.
all check Enabling this option audits every time the Disable reply to all rule is
actioned.
Label change Audit the outcome of performing a label change check. Enabling this
check option audits if a Check for label change rule applying this check
succeeds or fails – i.e. The user tries to change the value of a label
element but the action is inhibited by the rules for application (Office,
Email, OWA, Notes or Mobile Classifier (Warn or Prevent).
Label expiry Audit the outcome of performing a label expiry check. Enabling this
check option audits if a Check these selectors for expiry rule succeeds or
fails.
Label Audit the outcome of validating the completeness of a label. Enabling
validation this option audits if a rule applying this check succeeds or fails.
check
Maximum Audit the outcome of performing a minimum message subject length
message check. Enabling this option audits if the Check subject length does
subject length not exceed rule is actioned.
check
Message size Audit the outcome of performing a message size check. Enabling this
check option audits if the Check message size does not exceed rule is
actioned.
Minimum Audit the outcome of performing a minimum message subject length
message check. Enabling this option audits if the Check subject length exceeds
subject length rule is actioned.
check
Number of Audit the outcome of performing a number of recipients check.
recipients Enabling this option audits if the Check number of recipients does not
check exceed rule is actioned.
Originator Audit the outcome of a clearance check on the message originator.
clearance Enabling this option audits if a rule applying this check fails – i.e. the
check Originator tries to send a message but does not have the required
clearance.
Recipient Audit the outcome of a clearance check on the message recipients.
Clearance Enabling this option audits if a rule applying this check succeeds or
Check fails – e.g. Originator tries to send a message to recipients that do not
have the required clearance
Recipient list Audit outcome of performing a recipient list addition check. Enabling
addition check this option audits if a Check for additional recipients rule is actioned.
That is the user replies to or forwards a message that triggers such a
rule.
Recipient Type Audit the outcome of performing a recipient type check. Enabling this
check option audits if a Check recipient type rule is actioned.
Suggested Audit the outcome of performing a suggested classification check.
Classification Enabling this option audits if a Suggested classification check is
check actioned.
Unlabelled Audit when the unlabelled attachment check is triggered.
attachment
check
User warning Audit when the user warning check is triggered. Enabling this option
check audits if a User Warning check rule is actioned.
Options
The other settings configure whether an audit message is logged to the system application event
log. The audit message describes the event which has taken place. An event ID and user ID is
included when an audit takes place.
Setting Description
Always Use When auditing email addresses always try to obtain an SMTP address.
SMTP Note: This setting applies to Email Classifier, OWA Classifier and Notes
addresses Classifier.
Enabled - Auditing will attempt to obtain an SMTP address for the
sender and all recipients. In some situations this can lead to significant
delays because no SMTP address can be found.
Disabled - Classifier auditing will use the email address it has available.
Test mode Perform selected auditing operations even in the `test` mode. mode.
auditing Enabling this option audits activities performed whilst running in Test
Mode. Disabling this setting will stop events being logged when in Test
Mode.
Privacy Settings
There are five privacy settings in the list that affect all auditing. These allow you to mask selected
pieces of information from audit logs. The privacy settings are:
An example of event message content and a list of the different event messages can be found in
Auditing Event Messages on page 221 .
Languages
Classifier Administration allows you to configure all the text presented to users through the
various Classifier features. However, these basic facilities support a single set of definitions which
equate to a Configuration default language .
The Configuration default language is initially English, but you can change the presentation
values configured for this 'language' using the language mechanisms described in this document.
Classifier Languages mechanisms allow you to support multiple languages such that the text
presented to each user is appropriate (site configurable) for their chosen Language / Country.
The Languages to be supported are defined by selecting the Languages node. Initially the list only
includes the Configuration default language entry.
When a Language is added to the configuration, it has no language specific values defined. You
must configure each required value, if an item does not have a language specific value defined,
the Algorithm (below) will be used to produce a value for display.
You can add additional language entries, and delete any language entry except for the
Configuration default language (you will be warned that all associated values will be lost). This list
of languages is presented wherever per Language values may be configured (see table below).
Selected languages can be of the form Language (Country) or Language (e.g. French(Belgium)
or French ). Algorithm for finding the text to display.
Selector Limited facilities are provided (see features excluded table below).
Library
Per language values for the Caption and Tooltip can be defined for
each selector. Equivalent policy settings are also available.
Single selection list supports localisation (Languages) of selector
Value Name, Tooltip, Portion, and Alternate Name /2/3 .
You can select which Language related settings the Set Selector
view presents.
You can also make use of the Alternate names which can be defined
for Single Selection Lists, Multiple Selection lists, and Date offset
Lists.
Marking Library No facilities (see features excluded table below).
Content Library No facilities (not applicable).
Configuration No facilities (not applicable).
Settings
Policies The Policy default language can be defined as described in
Properties (Policy).
Per language values for the Caption and Tooltip can be defined for
each selector (Set Selectors).
Policy / Single Per language values for the Caption and Tooltip can be defined for
Click each Single Click button.
Clearance No facilities (not applicable).
Settings
The following Classifier features are excluded from the Languages mechanisms (are not site
translatable):
Features Description
Marking Formats Markings present business policy information (e.g. sensitivity)
which must be meaningful to all users. Supporting different
markings for different locales would be confusing to end users.
Sites can make their Markings multi-language (e.g. include both
German and English in a LLOT disclaimer).
(Not recommended) Sites may assign separate policies
(applying different Markings) to different groups (languages) of
users.
"No Marking" text is For the same reasons as Marking Formats above. Sites can
not translatable define composite text if required, e.g. No Marking / Pas Marking
/ Nein Marking / ...
Selector values are Multiple selection list and Date offset list do NOT support
not translatable localisation (Languages) of selector Value Name, Tooltip,
Portion and Alternate Name /2/3.
License
The features available to users are determined by the configuration established using Classifier
Administration and deployed to those users.
Classifier Administration only enables configuration of features for which the site is licensed.
A License may be effective for a limited duration (e.g. for evaluation), subscription, or in perpetuity
(Full).
NOTE: This document describes all features supported by Classifier. Depending upon the
licenses you have, some features may not appear or be greyed out. For example, if you do
not have a license for OWA Classifier, then OWA Classifier features will be unavailable.
Initial installation will supply one or more Classifier license files in the License sub-folder. Each
license file has a name of the form IMP xxx .LIC, where xxx relates to the feature or option (e.g.
IMPCEM - Email Classifier; IMPCOF - Office Classifier; IMPCOW - OWA Classifier; IMPCLN -
Notes Classifier).
The initial installation has no license files applied to the configuration. Each license is applied
using the sequence described below. If a site purchases additional options, an additional license
file is supplied which can be merged into the existing license settings.
NOTE: For Citrix environments, Classifier licenses are on a per user basis, thus there is no
difference if a user is using Email or Office Classifier using Citrix or that same user is using a
Windows desktop, or using Windows Terminal Server. OWA Classifier requires its own
license.
License Filenames
The following are applicable license files:
l impBOX Box Classifier
l impCAD CAD Classifier for AutoCAD
l impCAD (DraftSight) CAD Classifier for DraftSight
l impCEM Email Classifier
l impCLN Notes Classifier
l impCMB Mobile Classifier
l impCOF Office Classifier
l impCOW OWA Classifier and Classifier Mail Add-in
l impBLK Power Classifier for Files
l impCRP Classifier Reporting Console
l impCRS Classifier Reporting Service
l impCPA Power Classifier for Administration
l impDCS Data Classification Service
l impEXC Exchange Classifier
l impMOF Mac Classifier
l impFCF File Classifier
l impSPC SharePoint Classifier
License Codes
These are the license codes associated with each licensed Classifier product. The license file
supplied will be made up of this code prefixed with "imp", e.g. impCRS for the Classifier Reporting
Service. This applies up to and including version 1.3.1 and has been superceded by the Classifier
Reporting Service CRS license for v1.4 onwards.
l Box Classifier BOX
l CAD Classifier CAD
l Classifier API CPI
l Classifier Reporting Service CRS
l Data Classification Service DCS
l Email Classifier CEM
Installing a License
To install a license file:
1. Run Classifier Administration.
2. Select Global Settings.
3. Choose License.
4. Click Add / Update.
5. Browse to the location of the new license file, select the file, and click Open .
For an initial installation, the default location to find License files is in folders (one per
license) below the License sub-folder on the Classifier Base bundle. The selected file is
merged into the existing license file and the License Management dialog will be updated to
reflect the changes. License consistency will be checked when you click OK . When
upgrading an existing license, you may have to update all current licenses before clicking
OK.
Selecting an entry in the list and clicking Details will show further information about the
license.
NOTE: If you have difficulty merging a new license on to an existing system, you are likely
breaking the restrictions. Do not exit the license dialog until all product licenses have been
updated.
Restrictions
There are certain limitations applied by the license management software:
l All licenses must be at the same level (3 or 4). For example, you cannot use an (historic)
Email Classifier Standard Edition license (Level 3) and an Enterprise Edition (Level 4)
Office Classifier license. Therefore, to add the Enterprise Edition Level 4 license for the
Office Classifier to a configuration that contains Email and Office Classifier, you need to
obtain and apply an Enterprise Edition (Level 4) license for Email Classifier at the same
time.
l You can update Evaluation licenses to a Full licenses, but not revert from a Full to an
Evaluation license. You can have a configuration that includes a mixture of Full and
Evaluation licenses. If an Evaluation license expires, the features it licenses are
disabled/unavailable.
l If you wish to stop using one licensed feature (e.g. OWA Classifier), and want to ensure that
only the relevant features are made unavailable in Classifier Administration, you may have
to reimplement your configuration using only the subset licenses now required, or request
assistance from Classifier support.
l For historic licenses, you must use at least a Standard Edition (Level 3) license if you have
an existing configuration created with Classifier Administration Console Version 1.0.
Image Library
NOTE:
Classifier currently only supports images stored as .JPG, .JPEG or .PNG files.
Images stored in the configuration are limited to a maximum size of 5Mb, and if you add an
image greater than 500Kb, a warning will be displayed.
The Image Library allows you to define site specific images to be displayed to the end user in
some circumstances (Single Click configuration option, and specific Word, PowerPoint rules).
This section describes how you establish these images and their usage.
The set of images is managed through the Image Library node in the Classifier Configuration. The
full set of images is available for the Administrator for selection in all Classifier Policies.
If you intend to configure a Rule that supports an image, you should ensure that a suitable image
is available before defining the rule, or define the image at the image selection point in the rule
definition sequence using the "New..." option.
Editing an Image
1. Select the Image Library, select an image, and choose Properties.
2. If desired, change the image and/or description.
3. Click OK.
Deleting an Image
Ensure the image is not in use before deleting. If you attempt to delete an image that is still
referenced from one or more rules, for example, the action fails and you will be see a list of the
rules that use the image.
1. Select the Image Library, select an image, and choose Delete.
2. Click Yes to confirm deletion.
Click the current value (placeholder) and a list appears showing the set of configured messages
from which you can select.
The full set of rules requiring User messages is defined in Check rules.
1. Select the User Message Library and choose Add a new message.
2. Enter a unique name for the message. This is the value that will appear in a list of
messages available to you when defining various rules.
3. Select a Language. For information on defining Language specific values, see Languages.
4. Enter a Title that will appear on the dialog that appears to the end user when this message
is to be displayed.
5. Enter Message Text. The display area in the run time dialog only shows the first three lines
of the message text. The user can click for more information to see the rest of the text. You
can use the following tags to format the text:
l {B}{/B} for bold
https://wpf.2000things.com/2011/02/17/220-using-the-predefined-colors or a # hex
RGB value
l {#href=”<URL>” #text="Text for Link"} for hyperlinks
l For example, if you want your message to display as This function will cause an
error. Go to Microsoft help, then enter This function {B}{U} will{/B}{/U} cause an {C
value= “Firebrick”} error{/C}. Got to {#href=” https://support.microsoft.com/
#text=”Microsoft help”}
6. If you want, enter a Help URL that you can use to provide users with access to further
information. If this is not configured, the value defined in URL for your labelling help (in
General Settings) displays. If this is populated, the message will provide a Help button,
otherwise the Help button will be disabled.
7. Click OK.
Copying Messages
You can create a new message by using an existing one as a base.
1. Select the User Message Library and select the relevant base message.
2. Choose the Copy action. This will create a new Message entry with the name "<Message
name> - Copy<#>".
3. Select the copied message and click Properties to change the relevant details.
4. Click OK.
Deleting Message
You may delete a message that you have created. Messages that are created from a Label
Configuration template cannot be deleted since they are associated with rules in the template.
You should confirm that there are no outstanding uses of that message before proceeding. If you
attempt to delete a message that is still referenced from one or more rules, the action will fail and
you will be presented with a list of the rules that use the message.
To delete a message:
1. Select the User Message Library and select the message to be deleted.
2. Choose the Delete action.
3. Click Yes to confirm you want to delete the message.
Pre-configured UI Elements
The User Interface Library contains the following preconfigured UI elements that you can
customize:
UI element Description
Challenge Displays choices when a rule definition is configured to use the
Challenge Options. See Policies on page 134.
Classification Displays the stored label history for the document. Allows you to
History change the text presented to the user through the Classifier History
Display dialog which appears subject to the Classification History and
Classification History Display setting.
Content Displays any matches when a content check occurs. These items are
Inspection only relevant to Email Classifier (Outlook) and Office Classifier.
Check
Allows you to change the text presented to the user if a content check
rule detects content of interest, and the user then selects View .
NOTE: The text presented to the user in the initial Policy Check
dialog is configured either via the User MessageLibrary or
through the Policy Check item.
Decision Tree Helps the user with label seletion using question and answer
combinations. A user can view and modify user interface definitions
that are available for configuration.
File Classifier Displays the reasons and available options if errors or policy failures
occur when labelling files. These items are only relevant to File
Classifier license has been applied.
Folder View Displays failures on label change checks when performing Folder
Labelling View Labelling. See Labelling Configurations on page 66. This
feature is only relevant to Email Classifier (Outlook).
NOTE: The text presented to the user in the initial Policy Check
dialog is configured either via the User MessageLibrary or
through the Policy Check item.
Copying a UI definition
You can copy a UI definition by:
1. Select the User Interface Library and select the UI definition you wish to copy.
2. Click Copy. This will clone the existing UI definition with a name of <original name>(#).
3. Select the new copy UI definition and make changes as required.
Deleting a UI Definition
You cannot delete a UI Definition if it is in use in a policy. You can delete only those definitions
you created.
To delete a UI definition:
1. Select the User Interface Library and select the UI definition you wish to delete.
2. Select Delete.
3. Click Yes to confirm you want to delete the definition.
4. Click OK.
Labelling Configurations
NOTE: At this time, only a single Labelling Configuration is supported.
Most Classifier settings are held in a Labelling Configuration (with the exception of the Settings
applicable across the organisation). The initial installation has no labelling configuration defined.
A Configuration is established by an administrator who can then publish that configuration to a
master location. To make a change to the master configuration, retrieve the master configuration,
operate on it locally, and then publish the update.
A labelling configuration is based on a template configuration. The product is supplied with a
number of template configurations including an Empty Configuration.
NOTE: Pay attention if more than one person is making changes to the configuration, See
Configuration Deployment.
After installation, you must define and publish a Label Configuration to access the features.
NOTE: If you try to create a configuration before you apply a license, Classifier Administration
will direct you to supply a license.
If there is an existing (Master) configuration that you should retrieve from a central location using
Get Server Configuration .
To add a new label configuration:
1. Select Labelling Configurations and choose Add a new label configuration.
2. Enter the Name of your Labelling Configuration. This name may be included as the
Configuration Name element in Marking Format definitions (e.g. Classifier test).
3. Choose a Category and select the Template most appropriate to your environment.
4. If there is no license currently applied (e.g. immediately after installation) when you select
Add a new Label Configuration, apply a license file.
a. Click the Browse button, and navigate to the location of the license file to be applied
(e.g. below Base Bundle\License.
b. Select a .LIC file and click Open . This will populate the License File field. [These
license files are limited period evaluation licenses).
5. Click OK.
Renaming a Label
Classifier maintains the unique identifier originally assigned, and so pre-existing Label values are
still valid.
To rename a label:
1. Select Labelling Configurations and s elect the relevant configuration .
2. Choose Properties.
3. Enter a new name and then click OK .
NOTE: This will change the local name of the configuration. To make this Configuration
operational you will have to Publish the configuration and ensure that all client
environments are updated to refer to the new configuration.
Deleting a Label
You can delete your local Labelling Configuration. This removes the local information, but will not
affect any published location.
To delete your local Labelling Configuration:
1. Select Labelling Configurations and select the relevant configuration.
2. Choose Delete.
3. By default, any licenses applied are retained and available in a Label Configuration you
then create. If you need to remove the existing licenses, check the Delete licenses in use by
this configuration option. You will then have to apply licenses to any new configurations.
4. Click Yes to confirm you want to delete the configuration.
Selector Library
NOTE: The names of Selectors and Selector values must be unique within the configuration to
avoid ambiguities when parsing text labels.
A Label (Classification) is made up of one or more Selector Values that together “classify” an
object (document / message) with that label, defining qualities such as sensitivity / importance /
operational handling. For example, a label may just contain non-disclosure information.
Selecting the Selector Library node shows a list of the configured Selectors and the Values
defined for the currently selected Selector.
NOTE: The Select Library is initially empty if you are using the Empty Configuration Template.
Each Selector defines one or more Values that may be selected by the end user (using the Label
Selection interface). The Selector Library defines the Selectors and Values supported by this
Label Configuration. However, the Selectors and Values actually available to end users are
defined through a Policy which allows Selectors and / or Values to be hidden from selected users
according to the policy that is assigned to them.
Control over which Selectors and values are presented to end users is actually controlled as part
of Policy definition. Selectors and Values must be specifically chosen for presentation in a policy.
You should define all Selectors that are meaningful in your Label Configuration. This may include
Selectors that are not included in all policies. This may arise for example because one of your
Selectors is only relevant to a specific set of users. This does not preclude those (limited) users
from receiving labels containing values from the ‘hidden’ selector.
All Selectors can be shown through the standard Marking Format mechanisms. The behaviour
when a user receives a document or email message containing a value relating to such a ‘hidden’
selector is described in Policies on page 134.
By default, a Selector is not Mandatory – that is a Label may be valid if it has no Value chosen for
this Selector. To make a Selector mandatory, configure Check these mandatory selectors rules
when you add a rule. Selector values are relevant to any Check for the high-water mark rules
(Email, OWA and Notes).
Selector Description
Active Selector values 'added' into a policy are deemed Active. They are
available for the user to choose as a label value. Active values in an
existing label are used as the initial value for a new object (for example,
forward an email).
Retained You may have Selectors that are only available for selection by some
users. Other users may only be able to receive email messages
containing those Selector values, but you want them to forward an email
containing the restricted selector value - that is, to retain the label value
when Forwarding. You can mark a selector as being retained via the
appropriate checkbox on the selector in the Selectors in Policy dialog.
Retained Selectors can be used in Policy Rules in the same way as active
selectors and are processed by downgrading rules. Thus, if you add a
Selector to a Policy as a retained selector then any rules associated with
that selector and its values are retained and applied in the policy.
Label Dominance
If high-water mark (HWM) checks are configured by a rule, then when a mail message is sent, the
message label must dominate the labels of any attachments (and optionally Portion Marks).
NOTE: If you are using Portion Marking in Email Classifier and require message labels to
dominate all Portion marks in the email message body you must also Enable - Ensure label
dominates all portion marking.
The Label Dominance algorithm employs a different check depending upon the selector type:
Selector Descrioption
Type
Single (If Include this selector in clearance and attachment checks is un-
Selection checked the selector takes no part in label dominance operations)
List
The operation depends on the Hierarchy setting for a Single selection list:
l Hierarchic: The message label value is set to the 'highest' value
from the message and attachment labels.
l No Hierarchy: The user will have to be involved in resolving any
incompatible label issues*.
Multi- (If Include this selector in clearance and attachment checks is not
Selection checked, the selector takes no part in label dominance operations).
List
The union of all values for the selector from the message and
attachments is formed, and subject to the configured Maximum, is applied
to the message label. If the Maximum is exceeded, then the user will be
involved in resolving the issue*.
Freeform Freeform text selectors take no part in Label Dominance (HWM) checks.
text
Date pick The message label value will be set to the 'highest' date of those set on
the label and attachments.
Date item
* For Single valued selectors, it may not be possible to modify the message label to fully dominate
the attachment labels.
For example: consider two selectors Classification (Hierarchic) and Department (non-hierarchic)
and an email message containing two attachments labelled as Unmarked / Sales and
Confidential / Engineering. While setting a message label of Confidential would address the
Classification values, there is no single Department value that can encompass both Sales and
Engineering.
Similar difficulties can arise with Multiple selection list selectors if more values would be required
than are allowed by the maximum number of values allowed.
In either of the above circumstances, the user should resolve the issue (for example, modify the
attachments, or use the override check option if available).
f. Enter a Portion Marking. This is a text string that allows you to allocate a short form of
the Label Value so that when you wish to mark parts of a Word document or email
message as “Confidential" or "Public", the short form ( or portion marking value) is
inserted instead. For example: [P] indicating that this text may be circulated publicly.
[C] indicating that this text is confidential and must not be circulated publicly. If you
are not using Portion marking in emails or Word, then you can leave this setting
blank. See Portion Mark on page 20 for further details.
g. Enter alternate names if you wish to establish different Marking Formats to encode
the current label value in different ways. For example, you may wish to establish a
Marking Format which displays the selected values in full and use that format in
Headers and Footers; but for Subject Prefix in email messages, you may require
shortened forms (for example, Public - > Pub). Up to three “alternate names” for a
value can be defined using these properties. When you configure a Marking Format,
you can use either the Value Name or any configured Alternative name.
h. Click Update.
7. Select a hierarchy.
This setting is only relevant if Include this selector in clearance and attachment checks is
set. [Hierarchy has no impact on Clearance checks since all clearances are specific]. Three
choices are available via the drop-down list.
l No Hierarchy: this Selector does not operate as a Hierarchy. The Hierarchy column is
removed from the dialog. Selecting No Hierarchy in conjunction with Include this
selector in clearance and attachment checks will cause the user to have issues such
as High-water mark checks detecting differences between message label and
attachment labels that might be resolved automatically if the selector was Hierarchic.
l Hierarchical based on the value order: the Selector operates as a Hierarchy and the
order of appearance is the same as the display order (The value at the top of the list
is dominated by the second in the list in turn dominated by the third…). The hierarchy
value is automatically derived from the position (and is sequential - 1,2,3...).
l Hierarchical with manual configuration: The Selector operates as a hierarchy, but you
must set the relative order manually (through the Edit Values dialog / Hierarchy
column). The value assigned a hierarchy value of 1 is dominated by the value
assigned 2, which is dominated by 3 etc. Choosing this value makes the relevant
cells editable and allows the display order to be different to the hierarchy order.
Note: If you define the hierarchy values sequentially starting at 1, then Classifier will
detect this and automatically switch the setting to Hierarchical based on the value
order. You can change this by assigning different values.
8. Select the Include this selector in clearance, attachmen and portion marking checks if you
want the selectors to be included in high water mark and clearance checks.
9. Click OK.
1. Select the Selector Library and choose Add a new selector and choose Single selection list.
2. Enter a name for the selector, and, if you are configuring Titus interoperability, enter a Titus
field name - the name that will map the Titus field to a Classifier selector. If this is empty,
then the Classifier selector name is used.
3. Select the Language.
By default, the Selector Library list displays the selector Captions and Tooltips defined for
the Configuration default language. Any Caption or Tooltip shown in the upper pane which
has not had a language specific value defined will be blank. The lower pane will show the
Value Name, Tooltip, Portion, Alternate name /2/3 values defined for that language. If no
specific value has been defined, then a value is derived using the Algorithm defined in
Languages on page 49.
4. Enter a caption. This is the name displayed to the end user. The value may be overridden
by a Caption setting at the Policy level. The value should be short enough to fit into the
ribbon bar area that displays the label selection interface. Check that the effects are
reasonable in all relevant environments (for example, Outlook / OWA / Notes / Office etc.).
If you do not set this explicitly, then the Selector Name is used as the caption.
5. Enter a tooltip. This is an optional string that appears if a user hovers over the Selector in
the Label Selection area of the ribbon bar (maximum length 1000). If no value is chosen, or
there is no Tooltip defined for the selected value, then the Tooltip defined for the parent
Selector will be shown.
Due to the nature of the environment, some unusual characters within a tooltip
shortened forms (for example, Public - > Pub). Up to three “alternate names” for a
value can be defined using these properties. When you configure a Marking Format,
you can use either the Value Name or any configured Alternative name.
h. Click Update.
7. Set the minimum and maximum numbers of values to be selected. Setting a value does
NOT make the selector mandatory; it merely defines the lower bound if at least one value is
selected. A mandatory rule is required to make the selector mandatory.
8. If the user has too many or too few values, then select a message This allows you to
choose which message is displayed to the user if they have chosen either less than
minimum or more than maximum number of values for this selector. You can create a new
user message. See Adding a New Message to the User Message Library on page 57.
9. In the Clearance section, select if a Domain or User must be Cleared for one of
(Permissive) or all (Restrictive ) the selected values. These radio buttons are only available
if Include this selector in clearance and attachment checks is set and only applicable if
Clearance Checks are configured.You can also choose to ignore this selector in clearance,
attachment and policy marking checks.
10. Select the Include this selector in clearance and attachment checks if you want the
selectors to be included in high water mark and clearance checks.
11. Click OK.
5. Enter a tooltip. This is an optional string that appears if a user hovers over the Selector in
the Label Selection area of the ribbon bar (maximum length 1000). If no value is chosen, or
there is no Tooltip defined for the selected value, then the Tooltip defined for the parent
Selector will be shown.
Due to the nature of the environment, some unusual characters within a tooltip
reasonable in all relevant environments (for example, Outlook / OWA / Notes / Office etc.).
If you do not set this explicitly, then the Selector Name is used as the caption.
5. Enter a tooltip. This is an optional string that appears if a user hovers over the Selector in
the Label Selection area of the ribbon bar (maximum length 1000). If no value is chosen, or
there is no Tooltip defined for the selected value, then the Tooltip defined for the parent
Selector will be shown.
Due to the nature of the environment, some unusual characters within a tooltip
Due to the nature of the environment, some unusual characters within a tooltip
Editing Selectors
To edit a selector:
1. Choose a selector in the Selector Library.
2. Click Edit Selector.
3. Make necessary changes and click OK.
NOTE: If you have a Selector that is not Active or Retained in the current Policy AND is not
marked as Obsolete in the Selector Library, it operates as though it was actually marked as
Obsolete - that is, displayed if found, but not propagated.
NOTE: You cannot make a selector obsolete until all Rules referencing the Selector have been
deleted or modified to avoid any reference to that Selector. Warning appear if there are
outstanding rules when you attempt an Obsolete action, and the action is not allowed.
Deleting a Selector
Deleting a Selector should only be used if you are sure that there are no existing documents or
emails that use that selector. It may be more appropriate to mark the selector as Obsolete.
Deleting a Selector removes all associated Values. You cannot delete a selector if it is still in use
in a policy.
To delete a selector:
1. Select Selector Library and choose the relevant Selector.
2. Select Delete.
3. Click Yes to confirm the Delete action.
4. If the selector is still in use in a policy, you are prompted and the action is disallowed.
Marking Library
A Marking Format defines how selected labels are displayed to end users. Each Marking Format
defines how to construct a Marking using the features below in the order defined by the Marking
Format:
l Fixed Text
l Label Elements from the selected label (Labelling Configuration, Policy and Selector
Values).
l Hyperlinks
l Alternative Selector Value Names available as rendering qualifier to Label Element choice.
l Environment / Document Properties.
l Directory Attributes
l Rich text formatting.
NOTE: Saving a document as another type (for example, Word --> TXT or EXCEL --> CSV)
may lose the Classifier label and marking information.
NOTE: Not all elements are available in all environments. Check the actual Marking that
appears in all circumstances, especially if it is assigned as the Custom Format for
Summary Markings.
Adding a Selector
If Text / Date picker / Date offset selectors are to be included a Marking format that will be used to
parse a text label (for example, Externally defined label, FLOT, LLOT, Portion Marking or
Subject), Prefix and Suffix ( Marking Selector options) must be specified so that Classifier can find
the start and end of the string which contains the associated selector value.
1. Click Selector.
2. Select a label.
3. Select a text display to control how the selector appears in the marking. For non-date type
selectors, the list will include Portion Marking or Alternate name / Alternate 2/ Alternate 3
values when you configured the Selector. The ID entry represents the unique identifier
allocated to the Selector. Date type selectors can be Long / Short date values represent the
formats defined for the system under Control Panel / Regional Settings. The default is Long
date. Selecting Custom Date will make the Custom Date Format field available allowing you
to enter text formatting control as described in: http://msdn.microsoft.com/en-
us/library/system.globalization.datetimeformatinfo(v=VS.80).aspx. For example, you could
specify 'dddd, dd MMMM yyyy' to get 'Tuesday, 23 October 2012'. The selector token in the
Marking Format is annotated accordingly (If Long Date is chosen, it is not shown as it is the
default). Date items appear in local time.
4. Define prefix and suffix text and indicate that position they will appear in the marking. They
only appear in the marking if the selector has a value selected. This feature can be used to
remove redundant <whitespace> in markings and to facilitate parsing of (externally
defined) label values in Label Locations.
NOTE: Prefix and Suffix must be defined for Text / Date picker / Date offset selectors
included in a Marking format that will be used to parse a text label (for example,
Externally defined label, FLOT, LLOT, Portion Marking or Subject).
5. Click OK.
Adding a Hyperlink
It is recommended that you only insert Hyperlinks in Marking Formats intended for use in Email
FLOT and LLOT rules. You can use a Marking Format containing a Hyperlink elsewhere (for
example, a Word Header), but the link may not operate correctly.
1. Click Hyperlink.
2. Enter text to display in the marking.
3. Enter the URL address.
4. Click OK.
NOTE: Adding an email property to include, for example, Ccrecipients, inserts a place holder
into the Marking Format.
Content Library
The Content Library consists of (Search) Expressions which can be associated with Matchers.
Each Expression has a unique (Expression) Name, and an 'expression' defining the how content
will be checked. See Defining Expressions on page 83 for further details.
The Configuration can define that checks should be applied when sending an email message or
saving / printing a document to ensure that the content (Subject/ Body/ attachments / document)
does not contain certain 'words'. The attachment types processed during email content checking
are listed in Supported Content Checking File Types on page 238.
The operation of the search performed can be modified using a registry key setting described
under Matching algorithm control.
NOTE:
Content Checking is supported by Email Classifier and Office Classifier (Word, Excel, and
PowerPoint). Content checking of RMS protected items never yields a match as the content is
not accessible.
Matchers
A Matcher defines an association between the content to be matched (as defined by the
associated Expressions) and a set of selector values, such that the identified content may be
"permitted" to be defined by the selector values, or this content is never permitted regardless of
the label value.
You can specify the Matchers relevant to the check, and the action to be taken if matched. The
action defined by a Content Rule is only triggered if the associated Matcher fails; that is, an
Expression matches some content, and either the content is never allowed or the current label is
not in the permitted set of selector values. The Rule also allows you to control the level of detail
shown to the user when the Rule action is triggered.
A description of the end user experience of Content checking can be found in Content Checking
User view .
Each Content Matcher has a unique Name and Description and should have one or more
Expressions associated, along with permitted Selector values (a portion of the label space) for
which the matching content is allowed. If a message contains content matching an Expression in
the Matcher, then the message label must be in the defined label set for the content check to
pass.
Each Content Checker has a Match Type which is either ANY (the associated content will be
considered as identified if ANY of the Expressions defined matches), or ALL (the associated
content will be considered as identified only if ALL the Expressions match).
For more information, see Adding a Matcher on page 86
Defining Expressions
Each Expression defines a set of values which are to be compared against the contents of a
message, and the way in which the comparison is to be performed.
The comparison operates by comparing 'words', so if your expression is "apple and pie", applepie
is one word and will not match.
An expression might be a simple (case insensitive) comparison, or more complex.
l Regular Expressions need to be enclosed in “##” … for example, a regular expression to
search for two numbers together would have to be entered as “##[0-9][0-9]”, therefore, if
your phrase to look for was ‘banana’ and 'two numbers together', the search phrase to enter
would be: banana AND“##[0-9][0-9]”
l Regular Expressions must match a single whole word. For example, a search for
"##app.*ie" would not find "apple pie".
l Characters that are not indexed as letters are not searchable even using regular
expressions
l The search index does not store information about line breaks. Searches that include
beginning / end of line regular expression criteria (^ and $) will not work.
l Care must be exercised including "And" or "Or" as text in an expression as these are
'operators' and must be enclosed in quotes if you want them treated as text. For example,
an expression open and closed would match if the message contained both
"open"and"closed" within it. An expression open "and" closed would only match if the string
"open and closed" appeared in the document, a similar effect can be achieved by enclosing
the whole expression string in quotes - "open and closed".
l Noise words such as "if" and "the" are ignored during comparisons.
l The following should not be used as "text" when defining expressions: (comma), (period),?,
=, *, %, #, ~, &, ~~, ##, contains, and, or, +, -, [, ], /, \ (esc)
Examples:
Expression Meaning
banana Will match if "banana" appears somewhere in the content.
apple and pear Will match if both "apple" and "pear" appear in the content.
apple and not pear Will match if "apple" appears but "pear" does not appear in the
content.
(apple and pear) or Will match if at least one of the combinations (apple and pear) or
(banana and (banana + orange) appears in the content.
orange)
appl* Wildcard expression that matches apple, or application.
appl? Wildcard expression that will match on apple, but not apples.
"apple pie" Will match if the content contains the phrase "apple pie".
date(jan 15 2012) Matches dates in any of the date formats defined below.
date(jan 10 2012 Matches dates in the defined range (first half of 2012).
to jun 30 2012)
Date formats: The following are all recognised as the same date
January 15, 2013
15 Jan 13
2013/01/15
1/15/13
1-15-13
The fifteenth of January two thousand thirteen
Expression Meaning
mail Matches email addresses including wild-card * or ? inside the ().
(*@abcxyz.com)
creditcard(*) Matches credit cards in any of the formats below. Matches
creditcard(1234*) credit cards starting with n234.
The following are recognised as credit card number formats:
l n234-5678-1234-5678
l n234567812345678
l n2345678 1234 5678
Numerical tests, used by the credit card issuers for card validity,
are used to exclude sequences of numbers that are not credit card
numbers. However, these tests are not perfect and the credit card
number recognition feature may pick up some numbers that are
not really credit card numbers. The examples above are not valid
credit card numbers and will not trigger the checks - valid credit
card numbers must start (n) with 3,4,5 or 6
=== == Matches a sequence of 3 digits, a space and 2 digits.
mail Matches a hotmail email address.
(*@hotmail.com)
"##[a-z]{2}[0-9]{4} Regular expression to detect an index number of the form
[a-z]" xxnnnnx.
"##[a-ceghj-pr-tw- UK National Insurance with spaces
z]{1}[a-ceghj-npr-
tw-z]{1}" "##[0-9]
{2}" "##[0-9]{2}"
"##[0-9]{2}" "##[a-
d]{1}"
"##[a-ceghj-pr-tw- UK National Insurance number with no spaces.
z]{1}[a-ceghj-npr-
tw-z]{1}[0-9]{6} [a-
d]{1}"
"##([a-z]{2}[9]{3}| Matches NON99604079T9900 | NOONE355144BA900 |
[a-z]{3}[9]{2}|[a-z] NONE9701010RW900 but not ABC12343434F9900 |
{4}[9]{1}|[a-z]{5}) NOONE355123ASDAS | NOONE9121234UOUOO
[0-9]{6}([a-z]{1}[9]
{1}|[a-z]{2})[0-9]
{3}"
Deleting an Expression
You cannot delete an Expression that would result in a Matcher with no associated expressions.
To delete an Expression from a Matcher:
1. Select an Expression and click Delete.
2. Click Yes to confirm deletion.
Copying an Expression
You can use existing Expressions defined under one Matcher as the basis for a new Expression
for use in the current or another Matcher using a Copy and Paste sequence.
To copy an expression:
1. Select an Expression and click Copy.
A new entry name <Expression Name> 1 appears in the list.
2. Select the copied expression and click Properties.
3. Make the necessary changes.
4. Click OK.
Adding a Matcher
You can select a name for the content matcher and match any or all expressions within the
matcher.
NOTE: Content Checking is supported by Email Classifier and Office Classifier (Word and
Excel).
Modifying a Matcher
To view and change the properties of a Matcher:
1. Select the Matcher and click Properties.
2. Make the necessary changes.
3. Click OK.
Deleting a Matcher
To delete a Matcher from the Content Library:
1. Select the Matcher and click Delete.
2. Click Yes to confirm deletion.
A warning dialog will be displayed if you attempt to delete a Matcher that is in use in a Rule.
l If the current label is NOT in the defined label criteria, then the Warn/Prevent action is
activated.
l If Warn or Prevent is set (as opposed to Audit only) then the user will be prompted to take
an action.
NOTE: Highlighting matches in PDF files is only possible if Adobe Reader / Adobe Acrobat if
Enable search highlights from external server is selected.
Entry \ContentCheckFieldFlags
Only applicable if Classifier Content Checking is enabled.
Type REG_DWORD
Entry \ContentCheckFieldFlags
Only applicable if Classifier Content Checking is enabled.
Data Not configured - The default operation applies.
Any value defined will modify the search algorithm according to the bit-wise
values described in the dtsearch FieldFlags support web page (for example,
s earch for "dtsearch support FieldFlags").
For example :
Value = 3 (1 + 2) would ignore the filename (1) and ignore document
properties (2). The setting will apply to all Content Check rules performed by
a Classifier application.
Condition Library
The Configuration can define conditions that can be associated with Rules so that the Rule is only
triggered if the Conditions are met. For example, a rule that applied a LLOT only if an external
recipient was defined. Prerequisite conditions are associated with a rule as part of Rules Wizard
operation.
Each Condition defined includes one or more compatible (Document or Message) Condition type
definitions. See Supported Condition Types on page 91.
When defining a rule, you can indicate whether the rule applies Condition free or subject to one or
more Conditions.
Scenarios:
1. A message containing recipients from both domains A and B should have X-header AB
applied. This can be achieved with a single condition (Message Recipient Domain condition
with two entries) and a single rule.
2. A message with a recipient from domain A or domain B should have an x-header A or B
added. This will require two conditions one for each domain, and two rules. The fact that in
this case there may be duplicate rules (at the same point in the rule tree) is handled by the
fact that the rule highest up the tree takes precedence (See Move rule up / down).
If you combine entries with the AND operator, then all conditions must be true.
Alternatively, if you combine entries with the OR operator, then one or more conditions
must be true.
5. Click Add a new condition entry.
The New Condition Entry dialog opens.
a. Select a name and a check, and enter a value.
b. Click OK to return to the New Condition Type dialog.
6. Click OK to return to the Add Condition dialog.
7. Click OK.
Editing Conditions
To view or change the properties of a Condition:
1. Select a Condition and select Properties.
2. Edit the condition as necessary.
3. Click OK.
Copying Conditions
To copy a Condition to use as a base for another condition:
1. Select a Condition and select Copy. The new condition has the name <Condition Name> 1.
2. Select the copied Condition and select Properties.
3. Make the necessary changes.
4. Click OK.
Deleting Conditions
To delete a Condition:
1. Select a Condition and select Delete.
2. Click Yes to confirm the deletion.
Message Class Message Class [equals] [does not equal] [starts with] [ends with]
[contains] [does not contain]
Message Combinations (AND or OR) that Do or Do Not match existing
Content Expressions defined in the Content Library . For example:
Message
Content Count Expressions finds a match with (Expression) ApplesANDExpression
does not find a match with (Expression) Bananas .
Question Library
The Question Library is a repository that stores questions and answers that are used to create
Decision Trees for various scenarios. From these questions and answers, the Decision Tree
guides the user to select which label to apply.
For information on configuring the Decision Tree in a policy, see Configuring the Decision Tree
on page 146
This Question Library that is located with the other libraries and available to the configured
policies.
NOTE:
There will be language variations when the admin tool’s Allow multiple languages option is
enabled. This feature will only support plain text.
Configuration Settings
Opening Configuration Settings provides access to settings that are common across all policies in
this Label Configuration. The settings apply to all policies. Users operating under different policies
NOTE: Options are omitted or 'greyed' if the application / feature is not licensed.
Enable this setting to define whether the Classifier label selection features will be displayed when
the user is drafting a meeting request or appointment.
Enable this setting to define whether the Classifier label selection features will be displayed when
the user is drafting a task.
NOTE: The label summary bar may not be shown when choosing to assign a task to someone.
Enable this setting to define if users will be able to label items in Outlook folders, and/or modify
labels on items in Outlook folders.
If the feature is Enabled, the user has access to two additional actions:
Enable this setting to define if users will be able to change the label and markings on protected
word documents (File > Info > Protect document > Restrict editing) where editing restrictions is
set to No changes (Read only) or Comments. This setting is applicable when either Add a Header
/ Footer / Watermark and Add this image to header / footer / top / bottom / Watermark rules are
used.
NOTE: If Editing restrictions is set to Filling in forms, then the label value can be changed, but
any Headers / Footers / Watermarks will not be changed. Setting Editing Restrictions to
Tracked changes has no impact on Classifier operation - the label and markings can be
updated.
For supported Editing restrictions types, Classifier must register Header/Footer/Watermark label
information as "Exceptions" within the "Restrict Editing" mechanism. If the setting is Enabled,
Header/Footer / Watermark information will be displayed enclosed with square brackets (for
example, [Classifier test Public]).
NOTE: If a document has never had a Classifier label applied (even an empty label) then
Office Classifier cannot add a marking to that (protected) document unless the whole Header
/ Footer / Watermark area have been manually marked as Exceptions within the Restrict
Editing mechanism.
If this setting is enabled, and a high-water mark check rule is triggered because labels of
attachments are higher than the current message label, and it is possible to derive a label for the
message that will dominate all attachment labels, then the policy check dialog will display an
Upgrade message button.
If the setting is disabled, or a high-water mark label cannot be derived, then only a Remove
(attachment) button will be displayed.
Enable this setting to allow a site to disable OWA Basic/Light Mode if it has only installed the
OWA Classifier Premium Mode. If disabled, OWA Classifier will intercept any requests to operate
in OWA Basic/Light Mode.
This setting supports the following options which control in which circumstances Classifier will
apply Visual Marking rules (Subject/FLOT/LLOT) to Meeting Request responses.
l Disabled: Visual marking rules will never be applied to a meeting request response.
l On Edit Response: Visual marking rules will be applied if the user chooses Edit the
response before sending.
l On Send Response Now: Visual marking rules will be applied if the user chooses Send the
response now.
l All: Visual marking rules will always be applied.
A clearance may be assigned to an Active Directory Distribution Group - a Distribution Group that
has an associated email address.
If there is no clearance assigned to a Distribution Group (DG), Email Classifier will attempt to
expand the DG and use the DG member's clearances to perform clearance checks.
If this setting is disabled, then DGs are always expanded. If the relevant setting is enabled, then
DG clearance will be used if available. If DG clearance is not available, then the DG will be
expanded to perform clearance checks.
Applying headers and footers in Excel via Classifier rules can have a performance impact. Each
time the header/footer is changed for each Worksheet, Excel communicates with the default
printer which becomes more noticeable as the number of sheets increases. This setting can be
used (in conjunction with Apply Headers/Footers when workbook is saved ) to reduce the impact.
When this setting is enabled, all Headers and Footers are updated, every time the Label is
changed. If disabled, the workbook can have inconsistent markings when viewed in Print Preview
or Page Layout view.
NOTE: Headers and Footers are always updated when the workbook / sheet is printed.
Applying headers and footers in Excel via Classifier rules can have a performance impact. Each
time the header/footer is changed for each Worksheet, Excel communicates with the default
printer which becomes more noticeable as the number of sheets increases. This setting can be
used (in conjunction with Apply Headers/Footers when Label is changed ) to reduce the impact.
When this setting is enabled, all Headers and Footers are updated, every time thedocument is
saved. If disabled, the workbook can have inconsistent markings when viewed in Print Preview or
Page Layout view.
NOTE: Headers and Footers are always updated when the workbook / sheet is printed.
Enabled this setting to direct Classifier (when attaching a document) to automatically raise the
label on an email to encompass that document's label. If that automatic action cannot complete
(for example, there is a clash of single selection list values), AND a Perform high-water mark
check is configured, then a further check is appliedwhen the message is sent, and the user
involved in resolution of any residual issues according to the Warn/Prevent setting in the rule.
If this setting is enabled and a high-water mark check initially fails, then the software will do the
following:
l For Hierarchic Selectors ( Single selection list ) it will set the selector value to the highest
value from the message and the set of attachments and Pass the check.
l For Informational Selectors (those with Include this Selector in Clearance Checks unset -
Single selection list and Multiple selection list) it will retain the message setting for the
selector regardless of any attachment values and Pass the check.
For all other Selectors if a single value is available for the selector that will dominate the
message and attachment values for that selector, then the message label will be set to that
value and the check is Passed. If no such value is available, the check fails, and the user
will be notified of the issue.
A message labelled as "Confidential" with an attachment of "Confidential Sales" would have its
label automatically changed to "Confidential Sales", but a message labelled as "Confidential
Engineering" with an attachment of "Confidential Sales" triggers the dialog described in Policies
on page 134 .
If this setting is enabled, then the setting Allow manual upgrade when sending messages has no
effect.
Enable this setting so Classifier will automatically search for fields containing Classifier markings
whenever the Classification is changed.
NOTE: Certain content (for example, copied from a web page) can contain lots of fields
resulting in a significant overhead when Classifier searches for field values to update. This
setting allows the user to control when the field update is performed.
The name of the Marking Format to be used if incorporating a Classifier label into a Word
document using the Insert Label context menu action. If this value is not set then the value
associated with Custom Format for Summary Markings is used. See General Settings on page
116.
The name of the Marking Format to be used if displaying a Classifier label in a column in an
Outlook folder summary as described in Folder View Column Name on page 104.
If this value is not set, then the value associated with Custom Format for Summary Markings will
be used.
Enable this setting to provide additional control over the context menu display as described in the
File Classifier Guide. File Classifier context menu will display relevant selector values and the
current classification.
Enable this setting to show the Back button if a check dialog is shown during Save As operation.
This setting should always be Disabled for Visio 2013/2016 as there is no means of cancelling a
Save As operation at the point at which Classifier is invoked. Leaving the setting to Enabled for
Visio 2013/2016 may mean that rule actions are not performed at all.
When this setting is enabled, Office Classifier supported attachments (Microsoft Word, Excel,
PowerPoint, Project and Visio) are checked for the custom property set by File or Power Classifier
to indicate that they have updated the label value, and the visible markings may be inconsistent
with the label value. If the custom property is set, then the user is prompted and submission
halted, allowing the user to take corrective action. The text displayed to the user is configured
through the Text to display if attachment markings are inconsistent.
Enable this setting so Classifier can include Portion Markings in the body of an email message
when performing Label Dominance checks.
It only has effect if Portion Marking is enabled for Outlook.
NOTE: The message Subject and the message Body are scanned for portion markings. Thus,
a marking (for example, [RES] for Restricted) displayed in the Subject of a reply or forward
message will be treated the same as [RES] inserted as a Portion Marking within the message
body.
This setting (previously known as Column name for Folder View) allows you to define the heading
for a column you can then add into folder views. The column will show any Classifier label
associated with a message using the Custom format for Summary Markings .
1. Define the required name (for example, Classifier) as the Folder View column name.
2. Deploy the configuration change. You can then add the named column into the Inbox
folder.
3. Start Outlook.
4. Select the Inbox folder.
5. Send a Classifier labelled message to that folder.
6. Open and close the received message.
7. Select View / Add columns (or Position the cursor over the headings for the Inbox and
choose Field Chooser from the context menu).
8. Select User-defined fields in Inbox from the drop down.
The 'Column' name you assign does appear if you have chosen a value that already
appears in one of the other lists available under Field Chooser (for example, Label appears
under All Appointment fields). You can check this by using the Manual definition of column
name mechanism described below.
9. Select the required field and drag this into the required position in the folder column
headings.
10. Replicate that Folder View to all other folders. Consider selecting the parent nodes and
using the Apply view to sub-folders setting.
This setting may be useful in avoiding problems when performing operations such as follow up or
apply a category on messages when the Folder View column name option is enabled.
Such problems can arise when running in on-line mode (rather than cache mode) for messages
delivered to the Inbox when Classifier is not running (for example, overnight).
When this setting is enabled, on start-up, Classifier will search all the received main folders
(usually the Inbox) in each Mailbox, plus any subordinate folders, to ensure that the Classifier
Folder View column property is populated.
Enable this setting to determine whether users are allowed to close the task pane that displays
the Summary Marking.
Enable this setting to determine how embedded images are handled by Check for the high-water
mark, Check clearance for attachments, and Check for unlabelled attachments rules. See
Policies on page 134.
If icon overlays are in use, each overlay (typically 6) has to load the file to determine the correct
icon to display. For large files this can lead to visible delays to explorer.
This setting allows you to limit the icon overlay operation to files below a specified size. By
default, the value is not set indicating that no limit is applied.
Enabling this setting determines the text string (as derived from the selected Marking Format) to
be passed to McAfee. The text string derived from the Marking Format can include the selected
label values.
This setting relates to how Email Classifier interacts with McAfee Host DLP software (HDLP).
Classifier checks whether DLP is available at start up. If DLP is unavailable, the setting is ignored.
When enabled, Classifier is directed to call an API provided by DLP for use in Outlook
environments to pass text string as part of Classifier and ePO integration. The text string passed
is determined by the Marking Format configured by McAfee Host, and can include the selected
label values (classification). The DLP API is invoked just before the message is sent.
ePO Configuration
It is assumed that ePO has been configured to trust Classifier as follows, otherwise both
components will process the message in an uncoordinated manner.
To republish the ePO policy:
1. Navigate to the policy catalogue and open the current client configuration.
2. Select Settings/ Operational Modes and Modules and then verify that Outlook Add-ins /
Activate 3rd Party Add-in Integration is Enabled.
3. Go to Settings / Email Protection and under the Outlook 3rd party integration section select
Boldon James from the Vendor Name list.
4. Re-publish the ePO policy.
Portion Marking
NOTE: This setting is only applicable to Classifier Mail-in, Microsoft Outlook, Word, Excel, and
PowerPoint.
A portion mark is an abbreviated marking derived from a label value (for example, [P] for Public).
This Portion Marking application setting controls whether users can insert a Portion Marking into
the content of a message, document, spreadsheet, or presentation.
This Portion Marking action is only available if the relevant application Portion Marking setting is
enabled, AND Configuration Settings has a valid Marking Format configured.
NOTE:
Outlook must be configured to use Word as the email editor. Outlook. Not supported in a
Plain Text message body.
A Portion Marking may only be inserted into an empty cell in an Excel spreadsheet.
(Outlook and Mail Add-in) Portion Marks (Choose Portion Mark) are always inserted at the
current insertion point within the message body (even if the visible cursor is in the Subject
field).
If Portion Marking is available, then the user can insert a Portion Mark at the current position in the
message / document using either the Portion Mark action in the ribbon bar, or the Insert Portion
Marking action in the context menu for Word and Excel (the context menu action is not available
in Outlook, Mail Add-in, or PowerPoint).
To insert a Portion Mark:
1. Position the insertion point in the message / document.
2. Choose the Portion Mark to be applied, either via the Portion Mark action on the ribbon bar
or Insert Portion Marking action from the Word or Excel context menu.
The standard label selection dialog appears:
3. Choose the required label value and click OK. (If the user has defined Favourite Label
values, they will be available through the Favourites drop down).
The label value will appear at the current insertion point formatted according to the
configured Custom Format for Portion Marking.
To remove a Portion Mark:
1. Select the Portion Mark text (including any delimiters).
2. Click Delete.
Office Classifier will make no change during dominance checking where the current label value
contains a value for a non-hierarchic element that is different to the value for that element in the
Portion Mark. For example: Label = Internal / Sales and Portion Mark = Internal / Support, then
label would remain as Internal / Sales with no user involvement.
NOTE:
l Single Selection list and Multiple selection list Selectors only take part in automatic
upgrade of Portion marks if they have Include this selector in clearance and attachment
checks enabled.
l Email Classifier will correctly identify Portion Markings ONLY if the associated Marking
Format has delimiters around the entire marking format (for example, [{Classification
(Portion Mark)}]). See Properties (Marking Format) for details on how to do this.
Email Classifier usually only performs such label dominance checks at the time the Portion
Marking is inserted. It does not perform any more checking of the label against Portion Marking
(for example, on Message Send).
However, if the additional setting Ensure label dominates all portion markings is enabled, then a
dominance check will be performed if the user changes the label of the message. If Email
Classifier detects an attempted downgrade the following will be displayed, and the label
downgrade cancelled.
NOTE: Any lowering of a Hierarchic selector constitutes downgrade, as will removal of a non-
hierarchic selector. Any other change of value of a non-hierarchic selector will not constitute a
downgrade.
The Mail Add-in supports label dominance checking through the rule processing. See "Policies on
page 134. Automatic Label Upgrade is not supported on the Mail Add-in. "
Enable this setting to allow you to enforce rules such as Check these mandatory selectors when
an Export operation is performed. Any checks that fail will interrupt the flow and involve the user in
the choice of action according to the Warn / Prevent setting defined in the rule.
Enable this setting to allow you to enforce rules such as Check these mandatory selectors when a
Print operationis performed. Any checks that fail will interrupt the flow and involve the user in the
choice of action according to the Warn / Prevent setting defined in the rule.
Enable this setting to allow you to enforce rules such as Check these mandatory selectors (
Check rules ) when a Save operation is performed. Any checks that fail will interrupt the flow and
involve the user in the choice of action according to the Warn / Prevent setting defined in the rule.
When enabled and when processing Label Locations, if a defined x-header item cannot be found,
then Classifier will check to see whether there is an Outlook Item Property with the same name as
the x-header that can be used instead. When disabled, standard processing of Label Locations
applies.
The effects of this setting are described in the SharePoint Classifier and File Classifier User
Guides.
When enabled (Default): File Classifier icon overlays will include the Classifier symbol .
Enable this setting to display the Classifier ribbon entry when reading a message.
In various circumstances, Classifier will automatically display a label selection dialog (for
example, Mandatory selector required). By default, if Use Single Click with pre-defined labels is
configured, then a Single Click format is displayed; otherwise the Full label selection dialog
appears.
This per-application setting provides control over the style of dialog displayed when Use Single
Click with pre- defined labels is configured AND one or more of the following is triggered:
l Show label dialog on Save or Print
l Show label dialog on Send
l Show label dialog when mandatory label
This setting supports two values:
l Single Click when configured (Default): A Single Click label selection dialog is displayed if
Use Single Click with pre-defined labels is configured, otherwise the Full label selection
dialog appears.
l lFull Classification Dialog: The Full label selection dialog is displayed even though Use
Single Click with pre- defined labels is configured.
This setting modifies the end user experience when Mandatory Selector rules are triggered on
Send, Save or Print (see also Process Rules When Printing and Process Rules When Saving ).
If this setting is Enabled when a Mandatory Selector check fails (there is no value for the
Mandatory Selector), AND Warn/Prevent in the rule is set to Prevent, then the label dialog shown
is displayed rather than the general Rule exception dialog, allowing the user to set the label
directly.
Further control over the style of the label dialog displayed is provided by Show label dialog style.
The text that appears at the top of the dialog may be modified by the Text displayed when
mandatory label is absent setting.
If this setting is Disabled when a Mandatory Selector check fails (there is no label), OR
Warn/Prevent is set to Warn, then the general Rule exception dialog is displayed with the
Remove/Back/Continue options. The text in the body of this dialog is controlled by the relevant
application Rule.
This setting controls whether the Summary Marking value appears in an information bar at the
bottom of an open document window.
If there is currently no label value selected, then the Text to display if no marking is available will
be displayed as the Summary Marking value.
Depending on the environment, the user can expand and contract this information bar, and may
be able to close the bar with no means of re-instatement. The Show Summary Marking action
may be Enabled to provide a Classifier menu action to re-instate the Summary Marking display if
the information bar is closed.
The Force Summary Marking in task pane may be Enabled to prevent the user from closing the
information bar.
When enabled, the Summary Marking value is inserted into the Window title bar. It is appended to
the document name.
You must enable the Trust access to the VBA project object model. To find this option:
1. From your application, select File > Options > Trust Center.
2. In the Microsoft <Word/Excel/PowerPoint> Trust Center section, select Trust Center
Settings.
3. From the Macro Settings tab, selectTrust access to the VBA project object model.
When Suppress Classifier Alerts When Running Macros is enabled, Classifier alerts are triggered
while running macros will not be displayed.
The effects of this setting are described in the SharePoint Classifier Guide.
This setting allows you to configure the User defined message to be displayed to a user if an
attempt to use Allow use of OWA Basic/Light Mode is inhibited by OWA Classifier.
This setting provides an additional level of control if File or Power Classifier is used to label Office
Classifier documents.
Under default operation if File Classifier or Power Classifier labels a document, it will set a custom
property on Office Classifier documents to indicate that the Label may not match the document
markings. Office Classifier applications detect this custom property the next time the document is
opened and update all markings.
It is possible (particularly if using Power Classifier to label many files) that the label values applied
cause unexpected effects on the markings. This setting allows you to suspend (on a per
application basis) the automatic updating of markings, providing more time to resolve marking
issues.
Although Power Classifier for files can set the setting on a document, it is a document custom
property. It is still left to Email and Office Classifier to implement it.
When enabled and a document is opened, the Office application will react to the custom property
set by File or Power Classifier and refresh the document markings when the document is opened,
clearing the custom property.
When disabled, the Office application ignores the custom property when a document is opened.
However, actions such as Save and Print may still trigger an update of markings.
NOTE: Newer versions of File Classifier and Power Classifier provide control over the setting
of the refresh custom property as described in the relevant product guide.
This setting provides additional control over whether File Classifier writes label information to the
Alternate Data Stream for file types that are not supported (that is, NOT configured in
DocLabeller2 - for example, TXT files).
When enabled, File Classifier will store the label in the Alternate Data Stream.
This setting allows you to control what happens if the original received message has no label.
This option has no effect if a default label has not been defined. Enabled or Disabled will create a
"Reply" with no label.
To check this setting, go to Labelling Configurations > Configuration Settings > Classifier
Application Settings > Outlook Settings tab > Use default label when replying to unmarked emails.
Enable this setting so the Reply message can adopt the default label value (if configured) as the
initial label value for the reply message.
This setting is only relevant if you are using Perform Clearance Checking on Originator rules
under Email or OWA Classifier. In environments where a user can submit mail from more than
one mailbox, this setting can be used to ensure that Email Classifier uses the From value for
Originator Clearance checks rather than the default (primary mailbox).
Classifier Mail Add-in always uses from field for originator clearance.
Enable this setting if you want Email / OWA Classifier to use the From value to perform Originator
Clearance Checks.
Disable this setting if you want Email / OWA Classifier to always use the Primary mailbox identity
to perform Originator Clearance Checks.
This setting influences the operation of Check for the high-water mark . If the setting is Enabled ,
then the user will be 'warned' of any failure to access a file during those checks. Such failures can
arise, for example, if encrypted ZIP files are attached or the document is in a format inaccessible
to Classifier (for example, an old PDF format).
Further details can be found under Policies on page 134.
This setting supports controls the effect of adding a Watermark as the result of an Add a
Watermark rule firing:
l Disabled (Default): Classifier will set the Watermark font to Calibri.
l Enabled: Classifier will set the Watermark font to the first font used in the applicable
designated marking format.
Titus Interoperability
When you have enabled Titus Interoperation, you must configure Titus Interoperability so Titus
and Boldon James can work together.
To configure Titus Interoperability:
1. Select the Titus Interoperability Settings tab.
2. Enter the Namespace URI. This is used to generate a Titus-40 label. This must match the
URI defined in the Titus Configuration file exactly.
3. If you are using:
l Microsoft Outlook, enable Support interoperation for Email
4. If you want to include a Titus-30 label when sending an email using Microsoft Outlook, you
must:
a. enter the separator characters for multi-select selector values exactly as in the Titus
Configuration file
b. enter the Property Name as used for the TLPropertyRoot value to decode Titus-30
labels. For example, for Outlook, TLPropertyRoot=TitusCorp, Classification=TITUS
Internal, ContainsPersonalData=False; for Office, the value is used as a prefix to the
custom properties (for example, TitusCorpClassification=Internal). The Property
Name must match exactly as in the Titus Configuration under the Metadata Handlers.
Ensure the Do not use Schema Mapping for metadata with this ‘Property Name’ (all
others require Schema Mapping) checkbox is selected in the Titus Configuration.
General Settings
These settings are common to multiple applications, although a feature may only be applicable to
a subset of applications.
When disabled, the text displayed in policy check dialogs will not be automatically expanded
when the dialog is first displayed, and will include the button "Click for more information", allowing
the user to view any additional text.
If enabled, Classifier automatically expands the text the first time the Policy Check Dialog is
displayed, and includes the button "Click for less information"
This setting is only effective if RMS Client 2.1 has been installed.
Enable this setting to provide the user with the means to invoke RMS Tracking from the Classifier
Options menu.
The action is greyed until the document has been saved and has had RMS protection applied.
Selecting the Track Document action invokes the RMS tracking sequence - interacting with the
relevant portal. The default portal address can be overridden using the Azure RMS Tracking
portal URL override setting.
It allows you to override the default RMS portal address by the supplied URL.
When enabled, Classifier will check Label Locations for a label value before checking for an
internal Classifier label.
Classification History
NOTE: This setting is only applicable to Word, Excel and PowerPoint.
When enabled, Classifier will store classification change history within the document for
supported file types each time the document is saved.
Classification History Display controls whether the user can see and Clear the history information
but only for Office 2010 or later. Date items appear in local time.
NOTE:
By default, this setting is turned off so it needs to be switched to ENABLED.
This setting is not applicable to OWA Classifier, Classifier Mail Add-in, Notes Classifier,or
Mobile Classifier.
This setting defines how Classifier inserts the Classifier label ribbon group. It supports two values:
l Disabled: the normal display of Classifier icons is displayed on the Office Ribbon bar in the
three different modes.
l Enabled: the smaller real estate display of Classifier icons is applied to the Office Ribbon.
This setting defines how Classifier inserts the Classifier label ribbon group. It supports four
values:
l Default: Classifier will insert the Classifier ribbon bar group after the Clipboard group in
most application situations, but after the Respond group in an Outlook Read message
window.
l First: Classifier will attempt to determine the first group in the ribbon bar and insert the
Classifier group before this (first) group.
l Last: Classifier will insert the Classifier ribbon bar group at the end of the current groups in
the ribbon bar.
l Custom Tab: Classifier will display the Classifier Label selection group as a Custom Tab.
NOTE: Other software and or site/user configuration of the ribbon bar may have an effect on
where the Classifier ribbon group actually appears.
When disabled, document properties are skipped when performing content checks.
When enabled, document properties are also checked when performing content checks.
Enabling this setting uses the name of the Marking Format for incorporating a Classifier label into
a classifier log entry.
If this value is not set then the value associated with Custom Format for Summary Markings will
be used.
The name of the Marking Format to be used for storing a Classifier label into the Classifier
'private' document property bjDocumentSecurity Label( Document Properties (Office Classifier) ).
If this value is not set, then the value associated with Custom Format for Summary Markings will
be used.
This is the name of the Marking Format to be used when inserting a user selected Portion Mark in
an Office Classifier document (Word / Excel / PowerPoint), or an Outlook email.
This Marking Format should include delimiters around the value to ease user identification in the
content and to allow the Email Classifier to find markings in some situations.
You may wish to configure the alternative 'Portion Marking' Selector values for use in this Marking
Format as described in Properties (Selector Values) / Portion.
Further details of Portion Marking can be found in Portion Marking on page 107.
NOTE: This setting must be configured before the Portion Mark action will appear in the
application ribbon bar. Any Environment properties included in a Marking Format may not
appear if that Marking Format is assigned as the Custom Format for Portion Markings.
NOTE:
l Given the usage listed above, you may find it useful to keep the Summary Marking
format as simple as possible (for example, omit the Label Configuration name).
l Any Environment properties or Document properties included in a Marking Format may
not appear if that Marking Format is assigned as the Custom Format for Summary
Markings.
continue to enable the OK button). When disabled, the OK button is available to the user even if
the rule is configured as Prevent .
When enabled, this setting allows the Favourites button to appear and the features are available
to the user.
In the following circumstances, users may require access to a full Label selection dialog:
l Use Single Click with pre-defined labels and that it is Enabled for the policy.
l Not all selectors are accessible via the ribbon (for example, Text entry etc.).
If either of the above applies, then either a Label dialog button or a dialog launcher glyph is
displayed according to this setting.
The single click label dialog changes to display a Label Dialog button.
When enabled, an asterisk appears alongside missing mandatory selectors in the label dialog.
When disabled, the selector values available will comprise all the Selector values available in the
policy.
When enabled, the selector values available will comprise only those values marked available in
the policy for which the user is cleared.
When disabled, selector value buttons are placed at intervals determined by the longest item in a
column.
When enabled, selector value buttons are placed next to each other on ribbon bar row to minimise
space between them.
When enabled, the Label Options menu no longer appears in the Ribbon Bar. The Clear, Default
and Help actions are available if the user invokes the Label Selection dialog.
When disabled, Classifier Label Options appear in their usual location on the Ribbon Bar.
About Classifier can be found in the Office Backstage View (Select the File tab and click
Classifier).
This setting can affect the initial value displayed for a selector when Masking of Selectors against
Clearance is Enabled. It is configured by selecting Enabled or Disabled (default) from the drop
down menu available in the right hand cell.
See description of Masking of Selectors Against Clearance on page 121 for the effects.
This setting defines how to access any site-defined Help displayed to the user. When enabled, a
Help button appears as a separate button above Options within the Classifier Ribbon Bar. When
disabled, a Help action appears under the Options menu in the Classifier Ribbon Bar.
This setting defines whether the Classifier Clear action appears under Classifier Label Options
(outlook only) and / or on the Label selection dialog.
When enabled, the Clear label action is available.
When disabled, the Clear label action does not appear under Classifier Label Options.
This setting defines whether the Classifier Default action appears under Classifier Label Options
(outlook only) and / or on the Label selection dialog.
When enabled, the Default action is available. When disabled, the Default action does not appear
under Classifier Label Options.
When disabled, the action is that a Single Click button is only highlighted if its associated label
value exactly matches the currently selected label value.
When enabled, the button with the best match (if any) to the current label value will be highlighted.
This best match is determined using the best match algorithm.
The objectives of the best match algorithm are that if a button is highlighted then all values
assigned to that button must appear in the current label, AND the only values that appear in the
current label that are not assigned to the button should be informational only. If there is more than
one exact / best match then only one button will be highlighted.
The Best match algorithm operates as follows:
If the current label exactly matches the label configured for a button, then that button is
highlighted. If there is no exact match, then look for a button that:
l Matches all clearance relevant selector values in the current label (Note that 'no value
selected' is significant in this situation)
AND
l For information only selectors (ones that do not have Include this selector in clearance and
attachment checks checked).
l Either the button has no value assigned for the selector OR the selector value assigned to
the button exactly matches the value selected in the label
Example:
EXAMPLE:
Consider a configuration containing three selectors: Classification, Department and Project
where the Project is informational only, and the single click buttons below are defined:
Public Public / Sales -/Sales/-
Public / Sales / Project X Internal / Board
Label Value Single Click Button Highlighted
Public Public
Public / Project Y Public
External / Engineering No match
Public / Sales / Project Y Public / Sales
Internal / Engineering No match
Public / Board No match
- / Sales / Y - / Sales / -
NOTE: In the last case, no value selected for Classification is significant.
When disabled, each new instance of a Classifier application will show the Summary bar, and the
user may alter the size of the Summary bar for that instance only.
When enabled, the user may alter the size of the Summary bar (or Close), and the setting is
remembered.
This setting operates in conjunction with the Custom format for Summary Markings.
When disabled, the Marking format and Selector value colour settings are used when displaying a
Summary Marking.
When enabled, all Marking format and Selector value colour settings are ignored, and the
Summary Marking displayed will appear as Black text on a White background.
Unusual conditions may arise where Classifier is unable to expand a Distribution Group when
performing Check clearance for attachments, recipients, or originator rules.
Classifier will prompt the user proffering a Policy check the dialog with a Back choice and
depending upon the Warn / Fail setting a Continue choice.
The dialog includes text summarising the condition. By default, this will be:
Failed to expand the distribution list. Please contact your administrator.
This default text may be replaced by site defined text via this setting. The setting is configured via
the drop-down list in the right-hand column.
When disabled, selecting the blank entry Disables the setting (the default text is displayed).
When enabled, selecting a User Message from the list displayed Enables the setting and will
replace the default text with the text defined by the User Message.
Classifier may be unable to complete configured Check for the high-water mark rules ( Check
rules ). Classifier will then prompt the user proffering the Policy check dialog with a Back choice
and depending upon the 'Warn' / 'Fail' setting a Continue choice.
The dialog includes text summarising the condition - by default this will be:
If the Rule is set to Prevent:
l The following attachments have a higher label than that of this message.
l Click Remove to delete these attachments or Back to return to the message.
If the Rule is set to Warning:
l The following attachments have a higher label than that of this message.
l This default text may be replaced by site defined text via this setting.
l The setting is configured via the drop-down list in the right-hand column.
When disabled, selecting the blank entry disables the setting (the default text is displayed).
When enabled, selecting a User Message from the list displayed enables the setting and will
replace the default text with the text defined by the User Message.
This setting is only relevant if the Outlook or OWA setting Allow Folder View labelling is Enabled .
The setting defines the text to be displayed to the user if an attempt to set or modify a label on an
item in a folder fails (for example, because the user does not have the necessary permissions to
the item).
Classifier may be unable to complete configured Check clearance for originator rules. Classifier
will then prompt the user proffering Policy check dialog with a Back choice and depending upon
the Warn / Fail setting a Continue choice.
The dialog includes text summarising the condition - by default this will be:
l an error occurred while determining whether you are cleared to send a message with the
selected label. Please contact your administrator.
This default text may be replaced by site defined text via this setting.
When disabled, selecting the blank entry Disables the setting (the default text is displayed).
When enabled, selecting a User Message from the list enables the setting and will replace the
default text with the text defined by the User Message.
This setting allows you to configure the text displayed (by associating a User Message) when a
user is prompted to enter a reason for ignoring policy warnings.
Classifier may be unable to complete configured Check clearance for recipients rules (Check
rules). Classifier will then prompt the user proffering Policy check dialog with a Back choice and
depending upon the Warn / Fail setting a Continue choice.
The dialog includes text summarising the condition - by default this will be:
l An error occurred while clearance checking the recipients. Please contact your
administrator. This default text may be replaced by site defined text via this setting.
When disabled, selecting the blank entry Disables the setting (the default text is displayed).
When enabled, selecting a User Message from the list enables the setting and will replace the
default text with the text defined by the User Message.
Classifier may be unable to complete configured Apply this RMS policy rules ( Apply rules ).
Classifier will then prompt the user proffering Policy check dialog with a Back choice.
The dialog includes text summarising the condition - by default this will be:
l Failed to apply RMS protection
This default text may be replaced by site defined text via this setting.
The setting is configured via the drop down list in the right hand column.
When disabled, selecting the blank entry Disables the setting (the default text is displayed).
When enabled, selecting a User Message from the list enables the setting and will replace the
default text with the text defined by the User Message.
Classifier may be unable to complete configured Apply S/MIME security rules (See Setting Rules
on page 149). Classifier will then prompt the user proffering Policy check dialog with a Back
choice.
The dialog includes text summarising the condition, by default this will be:
l Failed to apply S/MIME. Ensure Email Security is configured correctly in Outlook This
default text may be replaced by site defined text via this setting.
When disabled, selecting the blank entry Disables the setting (the default text is displayed).
When enabled, selecting a User Message from the list enables the setting and will replace the
default text with the text defined by the User Message.
This setting defined the User Message shown in the dialog displayed after successful resolution
(for example, Remove) of Policy Check issues.
Selecting the blank entry disables the setting. Selecting a User Message from the list enables the
setting.
This setting allows you to configure the text displayed to the user if an attachment is detected with
an inconsistent marking. The check performed is as described in Ensure Attachment Markings
are Consistent on page 104 are consistent .
NOTE: This may be referred to as the "No Label text" and may be displayed if the document is
'unlabelled' or if the document contains Classifier label information, but with no values
selected (empty label).
You may use this setting (applicable to all Classifier applications) to define a link to a location that
will display label related help information to the user.
The link supplied must be a correctly formed absolute URL. Examples:
l http://www.xyz.com is a well-formed absolute URL, www.xyz.com is not. It needs a scheme
protocol specifier (http:// in this case) to be a well-formed absolute URL.
l file://products/MS/MSDN%20CD-KEYs.txt is a well formed absolute URL,
file://products/MS/MSDN CD- KEYs.txt is not. It needs proper encoding of special
characters (such as the space) to be a well formed absolute URL.
NOTE: Currently Classifier only supports http://, https:// and file:// schemes for the URLs used
in Classifier.
The user can access to this site via the Link to site defined help action.
NOTE: While OWA Classifier supports the Help links defined in a Classifier Configuration, the
nature of OWA access may mean that a defined link is not accessible due to external access
controls (for example, additional authentication requirements).
NOTE: Note: This setting takes precedence over the File Classifier Application Use Alternate
Data Stream (ADS) marking setting. Power Classifier for Files does not use this setting, but
version 3.10 supports an equivalent parameter instead. Any label set using this ADS option
will NOT be detected by the Classifier enabled Visio and vice-versa.
Label Locations
Label Locations (Marking locations) allows you to tell Classifier the (document and
email/webmail) properties that may contain label values that have not been established by
Classifier (for example, messages arriving from another organisation), and to assign relative
precedence to the different label locations. If Classifier recognises its own Classifier Label
property it always uses this as the label value for the document or email.
NOTE: You do not have to configure any Label Locations, Classifier will just treat objects that
have not been labelled by Classifier as ‘unlabelled’.
name (supplied as the Parameter value - that is, your header location). If an SMTP
header with that name is found its value will be assessed to see whether a Label can
be determined. If you select X-Header, enter an X-Header name.
l First Line of Text: Classifier will assess the First line of text (FLOT) in the message
entries each with its own property name supplied in the Parameter field. If a custom
document property with that name is found its value will be assessed to see whether
a Label can be determined. Note that this feature is not supported by Visio.
l Document Property: You may define multiple Document Property entries each with
its own property name supplied in the Parameter field (for example, keywords). If a
document property with that name is found its value will be assessed to see whether
a Label can be determined. A set of properties is available, but not all properties are
propagated (for example, Comments is not saved in PDF files).
Locations are searched in the order defined (use Up / Down to control the order) and
the first configured location found to contain a recognisable value is used to form the
document label value. Not all locations displayed are supported by all applications.
Check the product Release Note for further information (for example, AUTOCAD
Classifier).
4. Select a Property Name.
5. Select a Marking Format.
6. Click OK.
7. Click OK again.
l Recognise and remove any FLOT or LLOT on the original email and replace it with
markings matching the current label.
l Recognise and remove any Subject Prefix or Suffix on the original email and replace
it by a marking that matches the current label.
To facilitate marking recognition, Marking formats used for parsing must include clear unique
delimiters as part of the Marking Format definition (for example, [marking]). In addition, string
based selectors (Text entry, Date picker and Date offset) need to have Prefix and Suffix defined.
Marking Parsing
Classifier takes a string that it believes contains a Marking (determined using Marking
Recognition above) and uses the designated Label Location Marking Format (working left to right)
to determine a set of Label values (from the available Selectors) that produces that Marking.
The parsing essentially breaks the Marking into chunks that are either text or a label element, and
for label elements tries to determine the Selector value. The process allows for label elements
included in the marking format that have no value, and it also allows for the use of Alternate
Selector label values.
If the Marking contains an alternative value, then the appropriate primary Selector value is
adopted by the object label. This mechanism can be used to provide a 'mapping' between
external and internal values. For example:
Consider an organisation XYZ that internally has a Classification value of "Confidential", but
receives messages from a collaborative organisation (ABC) that may store "Sensitive" in a X-
Header (for example, X-ABC- Classification). It wishes to map Sensitive to Confidential internally.
So:
l Define the Classification value Confidential to have an alternate value of Sensitive.
l Define a Marking Format "ABC Sensitivity" that just contains the Classification label
element but with the Alternate value selected.
l Define an X-Header Label Location X-ABC-Classification and associate the ABC
Sensitivity Marking Format.
For non-Classifier labelled content, Classifier will start with the first ‘Combined Label Location’
and try and create a label using the configured locations. If a label cannot be derived, Classifier
will then move onto the next ‘Combined Label Location’, and so on. If a label cannot be derived
from any ‘Combined Label Location’, Classifier will process the standard Label Locations to see if
it can derive a label.
name (supplied as the Parameter value - that is, your header location). If an SMTP
header with that name is found its value will be assessed to see whether a Label can
be determined. If you select X-Header, enter an X-Header name.
l First Line of Text: Classifier will assess the First line of text (FLOT) in the message
1. Open Combined Label Locations, and in the Email Combined Label Locations section,
select Delete in the row of the Name you want to remove.
2. Click Yes to confirm you want to remove it.
3. If you want to delete the Email Label Location, click Edit in the row of the Name you want to
edit, then in the Email section, click Delete in the row of the Email Label Lcoation you want
to remove. Click OK.
Policies
Policies are containers for rules and actions. They determine what actions occur when a
particular event happens and the specified conditions in the rule are met.
own default label rather than using the policy-defined default. If selected, a Set
current label as default option appears in the Favourites menu assuming the Display
of Favourites button is also enabled.
l Use Intelligent Default Label if you want the default label that is applicable to a new
document or email combined with any existing configured Default Label with entries
in the Default Label (Policies) section that have matching conditions attached to
them.
NOTE:
l If the ‘User Selectable Default Classification’ feature is enabled and a user
has defined their own default label, then the User Selectable Default will
be used rather than any derived Intelligent Default.
l Using the Intelligent Default feature negates the need to duplicate policies
where the only difference between policies is the default label.
l When deriving an Intelligent Default, a Classifier product will take the
configured default label as the starting point for the Intelligent Default. It
will then determine which Default Labels have a matching condition
attached to them. These will be processed in turn, starting with the lowest
priority, and the values for each applied to the Intelligent Default label. As
the matching Default Labels are processed, any existing values that are
currently in the Intelligent Default will be replaced even if the existing value
dominates the value from the matching Default Label.
l By defining appropriate conditions on labels in the Default Label section,
you can configure different default labels as required for your organisation.
For example, you may wish to have a different default label when a user in
a ‘ Finance ’ group creates a new Excel workbook as opposed to when a
user in a ‘ Marketing ’ group creates a new PowerPoint presentation.
If you do not select this check box, label selection is standard. The user sees
individual drop- down lists for each selector.
IMPORTANT: The Use Assisted Labelling setting can never be undone on a policy
once it has been set. The user interface for Assisted Labelling operates
differently between Office and OWA environments.
l Use Decision Tree - adds an extra tab to the associated policy editor and make it
available to the client. See Question Library on page 96.
l Use Single Click with pre-defined labels - adds an extra tab in the central frame that
gives access to the Single Click configuration features. The standard label selection
interface displays the available Selector values as 1 to 3 lists. You can choose to pre-
configure up to 12 label values that then appear as individual buttons in the Ribbon
Bar. The user can select individual selector values via the Classifier Label dialog box
launcher arrow. See Single Click Operation on page 21.
7. If you want to selector captions to appear, select the Show selector captions on the ribbon
bar check box. This setting is not applicable to Notes, Mail Add-in, or Mobile Classifier.
8. Because the values of some selector types can be displayed as buttons, set a value on
when to wrap the buttons. The Classifier ribbon bar can accommodate a maximum of three
rows of selector information. This setting can be used to control how Classifier wraps these
buttons within the Classifier Ribbon Bar. If this value is not set (default), then Classifier will
display the defined buttons for a selector on a single row. Each selector shown in the
Ribbon Bar will start on a new row regardless of whether Display selector values as buttons
is enabled or disabled. If there are more than three rows to appear in the Ribbon Bar (after
wrapping), Classifier reverts to the default (single row per selector), and the Classifier label
button displays providing access to the Label selection dialog. Standard Ribbon Bar re-
sizing actions apply, so ensure that the settings configured are appropriate for the number
of selectors and values to be displayed.
9. Select a User Interface definition as configured in the User Interface Library on page 60.
10. Select a Default Language for the user interface. This allows you to choose the Policy
Default Language to be used by the algorithm for finding the language to display to find the
correct (language related) value to display to a user. See Algorithm for finding the text to
display on page 50.
NOTE: Only visible if Allow multiple languages is enabled.
Editing a Policy
To edit a policy:
1. From Labelling Configuration, select Policies, and select a Policy.
2. Select Properties.
3. Make any necessary changes.
4. Click OK.
Copying a Policy
You can use an existing Classifier Policy as the basis for a new policy. All the existing settings will
be carried forward.
To copy a policy:
1. From Labelling Configuration, select Policies, and select a Policy.
2. Select Copy.
The copied policy appears as "copy of <policy name>'.
3. Select the copied policy and click Properties.
4. Make any necessary changes.
5. Click OK.
Deleting a Policy
NOTE: Ensure that all users are mapped (for example, through Group Policy configuration) to
a different policy before deletion.
To delete a policy:
1. From Labelling Configuration, select Policies, and select a Policy.
2. Select Delete.
3. Click Yes to confirm deletion.
Locking/Unlocking a Policy
You can lock policies to indicate to other Classifier administrators that the Configuration cannot
be published at the moment (for example, because policy changes are incomplete).
To lock a policy:
1. From Labelling Configuration, select Policies, and select a Policy.
2. Select Lock Policy.
To unlock a policy:
1. From Labelling Configuration, select Policies, and select a Policy.
2. Select Unlock Policy.
9. Select a tab placement - either on the top or on the left on the tab pages.
10. From the Time before tooltip is displayed dropdown, if you are using speech recognition
software, you can indicate how much time lapses in seconds when you hover your mouse
over an item and when the tooltip displays. This allows the software to read the details of
the active control before displaying its tooltip.
11. Select a Title colour for the description text in the header section of the user interface when
using the Custom Theme.
12. From the Tooltip display duration time, indicate how long a tooltip remains on screen, in
seconds, unless you move your mouse.
13. Click OK.
NOTE:
l Suggested classifications are usually triggered by an appropriate ‘Check for a
suggested classification’ rule but enabling ‘User-Driven Suggested Classification’
allows the user to trigger the Suggested Classification manually by selecting a button
from the Office Ribbon Bar or from within the Classifier Labeller User Interface.
l For the feature to be available in a client that supports user-driven suggested
classification, the setting to ‘Allow user driven suggested classification’ needs to be
enabled and appropriate messages selected for all possible outcomes.
l If a suggested classification check is performed manually, the result of the check will be
displayed in the standard Classifier Policy Check dialog with the appropriate configured
message.
l A ‘Check for a Suggested Classification’ rule is not required for User Driven Suggested
Classification to function since this manual method of performing a check for
suggested classification works against the suggested classification configuration. Any
configured ‘check for a suggested classification’ rules will function as they normally
would regardless of whether this feature is enabled or not.
l Make a Selector available or unavailable in the policy using Selectors in policy, and
configure whether they appear on the Ribbon or the general Label Selection dialog; and
whether the Label Selection dialog is configured to display the selectors across a number of
Tabs.
l Control the Selector Values available in the policy and the default values.
l Assisted Labelling may be configured using Connect Selectors - Assisted Labelling .
l If Use Single Click with pre-defined labels is enabled, manage the associated interface
through the Single Click tab.
l Switch the view to show the settings associated with a particular Language
Setting a Selector
When a new Policy is created, it will have no Selectors assigned (unless it was established using
the Copy Policy action). Ensure you have selectors added in the Selector Library. See Selector
Library on page 67. When configuring a policy, you need to control the selectors that are relevant
to the policy. Setting a selector allows you to add or remove selectors to/from a policy, and
configure whether they appear on the Ribbon or the general Label Selection dialog, and whether
the Label Selection dialog is configured to display the selectors across a number of Tabs.
Other selectors defined in the selector library that relate to (for example) externally defined label
elements may still be recognised and displayed.
To set a selector to a policy:
1. From the Navigation tree, select Labelling Configuration > Policies > policy name.
2. Ensure the Set Selectors tab is open.
3. In the Actions pane, select Selectors in policy.
4. Pick a Selector Name and click Add >>.
The Selector name moves to the Selectors in policy section.
5. In the Selectors in policy section, pick a tab. See Adding Tabs on page 140.
6. If you want the selector to appear in the Ribbon, select the Ribbon checkbox.
NOTE: If your selector type is Text Entry or Date Picker, the checkbox does not appear.
7. If you have a label value that is part of a different policy, but you want the value retained,
click the Retained checkbox. For exampoke if an email message or document is received
containing a Selector value that is recognised in the selector library, the value is displayed if
the selector is included in a Marking Format, even if it is not related to an Active selector. If
you use an existing label containing such a (non-active) selector value as the basis for a
new object (for example, Reply to a received email message) the label value will be
dropped from the new label. Another scenario is if a selector is no longer active, but the
selector settings are to be retained in rules in the policy.
NOTE: Your Marking Formats may include such Retained Selectors so that Summary
Markings would still show any defined value. By default, non-Active selectors are NOT
propagated to new Documents or email messages.
8. Click OK.
Adding Tabs
By default, the general Label selection dialog shows all selectors configured for the current policy.
You may wish to group the selectors to reflect their usage by defining one or more tabs, and
configuring which selectors appear on each tab.
To add a tab:
1. From the Navigation tree, select Labelling Configuration > Policies > policy name.
2. Ensure the Set Selectors tab is open.
3. In the Actions pane, select Selectors in policy.
4. Click Tabs.
5. Click New.
6. Enter a tab name and click OK.
Connecting Selectors
Assisted Labelling allows you to guide user selection of label values by limiting the choices of
selectors and / or selector values depending upon the value chosen for a preceding selector.
A policy is either an Assisted Labelling Policy or not as determined by whether the Use Assisted
Labelling option is checked on the policy properties. If the option is checked then the Connect
Selectors Tab appears if the policy is selected; initially showing the root of the Selector sequence
tree.
NOTE: Once a policy has been set as an Assisted Labelling policy, it cannot be reverted to a
standard (Non-Assisted) Labelling policy.
All the standard policy management features apply, including defining the selectors and values
that are available in the policy (for example, Selectors in policy and Edit Selector). The only
difference is that the Connect Selectors Tab allows you to construct a dependency tree.
NOTE: Until you start to populate the Selector Sequence Tree, the effects of using the policy
may be indeterminate in terms of any label selection displayed, default values and rule
operation.
You start to build the Selector Sequence tree by adding a Selector at the root. This selector is the
user's first choice.
Keep in mind the following:
l the Selector Order defined in the Configuration is strictly enforced. Therefore, if one branch
of the tree adds a third selector defined below a value for the first selector (essentially
omitting the second selector), the second selector cannot then be added further down.
l you cannot add a selector below a Multiple selection list value.
l mandatory selector rules, that demand a value for a selector that is not visible, should be
avoided because the associated rule will always fail.
l the default values defined in the policy selectors are ignored in the Assisted Label
connected selectors. Only default values configured in the connected selector are visible in
the client.
NOTE:
l Depending on a per-policy option, this new tab is displayed or hidden.
l The Administrator must define a list of questions in the 'Question Library.' For more
information, see Question Library on page 96.
l A different Decision Tree may be defined for each configured Policy.
l The following events related to the Decision Tree are recorded in the Windows Event
Log:
l User Guidance Dialog – Active
NOTE: The availability of menu items depends on the selected tree node. Only a single label
node may be added per answer.
Only a single label node may be added per answer. The Label menu item will then be greyed out
and the Properties menu item used to edit the label. When a node is selected then the relevant
operations will enabled for the selected item.
NOTE: The display style will depend on whether the question has been defined in the Question
Library as single or multi-select.
Setting a Label
A label can be set for an Answer Node is selected in the Decision Tree.
NOTE: You can only change labels to multi-select answers that are processed from the first
answer until the last.
To set a label:
1. From the Decision Tree, right-click an answer, then click Edit.
The actual content of the Classification window that appears will depend on your
configuration.
2. Select options as needed.
3. Click OK.
NOTE: Single Click and Assisted Labelling can be used together, but you will not be able to
configure Single Click until you have added at least one selector under the Connect Selectors
Tab. Changing a policy name that has been deployed invalidates any instances of that name
set through Group Policy configuration. Changing the description will have no side effects.
The standard label selection interface displays the available Selector values as 1 to 3 lists.
You can choose to pre-configure up to 12 label values that then appear as individual buttons in
the Ribbon Bar. The user can select individual selector values via the Classifier Label dialog box
launcher arrow.
1. Go to Labelling Configuration > Configuration Name > Policies > Policy name.
2. In the Action Pane, select Properties.
3. Under Help the user chooses a label, select Use Single Click with pre-defined labels.
4. Click OK.
7. In the drop-down box, select the language. See Languages on page 49.
8. Enter the caption text that will appear on the button.
9. Enter the text for the tooltip on the button.
10. Select a Button display option:
l Caption only: only the configured caption is displayed.
l Show colour: it will display a colour block. By default, the colour is taken from the
selected in the drop-down menu provided which will display all the configured images
that have been placed in the Image Library . The image will be scaled to fit within the
16*16 space.
NOTE: Click the Clear button to clear the values.
Setting Rules
Classifier uses Rules to control the operations performed by individual applications. Each rule
applies to a single application. It is only the effect of Rules that end users see; the Rule is defined
by Administrators.
Rules apply to a single Policy. If you need to support multiple policies using similar rules it may be
useful to establish the first Policy and then use the Copy (Policy) mechanism to establish initial
rules for the second Policy that may then be edited to achieve the required effects.
The set of Rules supported varies across individual applications. The complete list of rules
supported by the various applications can be found in Rules supported. The rules supported fall
into three general types:
Adding a Rule
Office, Email, OWA, Mail Add-in, Notes, and Mobile Classifier allow Markings and/or Metadata
based on the current label value to be applied to the current document / message.
Any Marking defined through these mechanisms overwrites any existing value in the same
location defined by any other means (for example, the user).
NOTE:
Any rich text formatting specified in a Format is ignored when used in a location that does not
support such features (for example, Subject field).
If your site uses Word templates to set Header/Footers etc. you may find that Insert Marking
as Field Code (Word only) is more appropriate for Word than some of the rules below.
To add a rule:
1. Go to Labelling Configuration > Configuration Name > Policies > Policy name.
2. Click the Set Rules tab.
3. Choose at the outset where it resides in the tree by selecting a node from the tree. The
selected node can be one of the following:
l Always: A rule inserted here is applied regardless of the label value (includes No
Label) unless there is a more specific rule (lower down the tree) that takes
precedence.
l No Label: The rule will only be applicable if there is no label value selected (all
selectors are blank). There are no rules associated with this node in the example
below.
l Any label: There is a label value defined (it does not match a No label rule) but
7. Enter a rule name or leave the default. The name must be unique.
8. Click the hyperlinks in the rule parameters to configure them. See Setting Rule Parameters
on page 151
9. Select the hyperlink in the Edit rule prerequisite conditions to set it or change it.
10. Click OK.
NOTE: Click the Back button any time to change your selections. If you inadvertently
add a duplicate rule at the same point in the rule tree, the wizard will warn you, but will
establish the new rule. However, a rule with prerequisites defined is not a duplicate of a
rule without prerequisites defined.
Dialog Description
S/MIME Operation allows you to request that S/MIME security be applied when the
message is sent.
Any label value included in the body (for example, FLOT) is
protected. A label value included as an X- Header or Subject
value is outside the data protected by signing/encrypting the
email message.
Not supported by Notes, Mail Add-in, or Mobile Classifier.
Dialog Description
Message allows you to request that a specific message Importance
Importance property is set when a message is sent.
Not supported by Notes, Mail Add-in, or Mobile Classifier.
Message Sensitivity allows you to request that a specific message Sensitivity is set
when a message is sent
Not supported by Notes, Mail Add-in, or Mobile Classifier.
Message Expiry allows you to request that a specific expiry value is set when a
message is sent.
Not supported by Notes, Mail Add-in, or Mobile Classifier.
Label allows you to set the selector as <Any> (Selector name appears
in the label condition), Present (value is present), Not Present
(value is not present) Undefined (any valid selector value or
<Blank>), or Value (the specific value defined for the selector.
This value appears in the Label).
l For Text entry and Date Picker selectors, the presence of
a value in the rule condition renders the actual value
irrelevant.
l For Multiple selection list selectors, you can only choose
one value from those available. You can define other
(similar) rules that fire on other values of that same
selector. If several rule instances apply because more
than one value has been selected for that Multiple
selection list, the Rule overlap handling algorithm applies.
So, choosing Classification = Public / Department = <Any>
results in a label condition of “Classification"="Public”,
“Selector"="Department” being displayed in the label
condition placeholder.
l If you change the Label condition in a rule, the rule position
in the rule tree will change to reflect the new settings.
l You cannot set a label condition where all selectors are set
to Undefined; you should add the rule directly under the
Any Label node instead.
Marking format allows you to select an existing marking format from the Marking
Library. This is only supported for messages and meeting
requests.
Dialog Description
Position allows you to set your preferred label position (either Prefix or
Suffix) relative to exisitng text. Only supported for messages and
meeting requests. A Reply/Forward operation will check for any
existing recognisable Subject marking and strip if found before
applying a Subject marking appropriate to thecurrent label.
Email Classifier may truncate the original subject to
accommodate the Prefix / Suffix. If the Prefix or Suffix is longer
than the maximum subject length, then the Prefix / Suffix is not
included in the updated Subject value.
Image allows you to insert an image. Depending on the application
selected in step 5, you can select the page (odd vs even page),
position on page, alignment relative to a margin, image
placement (in front or behind text), add image as a watermark
and enable Smart Selection (where marking is inserted in the
first available position when an image is not available).
Watermark Options allows you to control how the watermark is displayed. You can
also set its transparency. Under Word, Classifier adds an entry
to the Watermark gallery if there is an Add Watermark rule
configured applicable to the current label value. Although the
user might use this gallery entry to remove the current
watermark, Classifier will always perform any applicable rule
when the document is saved. Classifier also supports a mutually
exclusive 'Add this image as a watermark' rule to apply an image
rather than a text watermark.
Text Value allows you to add text (usually when adding an x-header). In a
Lotus Notes environment, for the x-classification to be
transmitted across an SMTP connection, classification must be
included in the Domino server list of x-headers to be transmitted
across that connection (the "x-" is automatically applied by
Domino). Any characters that are not "7 bit US-ASCII" in a
marking format that is used to populate an X- Header field on an
email generated by Email or OWA Classifier appear as'?' when
the message is sent. You might use the Alternate Value
mechanisms to provide a mapping from your selector values
(non-Ascii) to 7 bit US-ASCII and back again. See Recognising
and Parsing Label Markings on page 131. However, this
approach will not work for Text entry selector values.
Not supported by Notes, Mail Add-in, or Mobile Classifier.
SMTP Address allows you to add recipients using an SMTP address.
Entry
Dialog Description
Action allows you to select an action to take when a check fails. If you
select Challenge, click the Options button to select more options
to describe the User Defined Action.
User Message allows you to select a Prevent, Selector, or Warn message in
various scenarios.
PowerPoint Text allows you to assign the layout and formatting options to a text
Box Settings box.
Alignment allows you to fit a header or footer to a Placeholder (so header
or footer cannot be resized) or to a Slide (the header or footer is
resized to the width of the PowerPoint slide)
Document Property allows you to select a property to configure the rule.
RMS Policy allows you to request that a specific RMS policy be applied to a
message or document [chosen from the list displayed - empty if
none are found for the user] or, that a specific action is taken.
l All applications Remove Protection.
l For emails the policy is applied when the message is sent -
the associated RMS banner will not be visible prior to this
time.
l For documents the RMS policy is assigned whenever the
label value is changed.
l Outlook only Do not forward which will cause the
MailItem.OlPermission to be set to 1 or olDoNotForward.
Additional notes on usage of this rule can be found in Apply
RMS policy notes.
Additional considerations apply if you are using Azure RMS as
documented in Azure RMS support
Excel Cover Page allows you to create a text box within a specified range of cells.
Settings You can also choose how to size it, where to align it, what
direction the text box is displayed, and if the text box contains
borders.
Dialog Description
Text box with When a Text Box has been inserted via the rule, the text is
Marking in Headers formatted according to the defined Marking Format. The user
or Footers can manipulate the text box (for example, moveit, format it etc).
When the rules run, if an existing Classifier 'Text Box' exists in
the header/footer, only the text (field code) is updated, and any
customisations made by the user to the box will remain. The
alignment applied from the original marking format is retained
regardless of alignments of marking formats associated with
subsequent rules applied (for example, due to label change).
This means that any changes made by the user to the text
content (for example, font, colour, size, etc.) will be lost the next
time the rule fires. For Word, this behaviour is modified if the
Marking Format has 'Use Plain Text' specified. In this case,
Classifier will replace the text content but leave any surrounding
formatting unchanged. Any formatting set by the user within the
text will still be replaced.
Dialog Description
Advise User to let the user select the permitted changes for each selector.
You can allow multiple rules of this type. This means that if there
are duplicate rules, Classifier will action all rules including
duplicate ones. This can lead to multiple policy check dialogs
appearing. The rule can be used to limit user's ability to change
labels: to change labels on existing documents, that is if they
open an existing document that is labelled any changes to the
label are policed according to this rule, and to limit the user's
ability to change labels if using Sent or Received email or web
email messages as the basis for a new email message. Thus,
the option affects Reply to / Forwarding and Re-send actions
and limits the user’s ability to manipulate the label for the new
email message (which uses the label from the existing email
message as its initial label value). You can select:
l Any change - the user may make any change to this
selector value but the rule is not triggered. Rule success
auditing will still occur.
l No change - no change is permitted and therefore any
change to the label value for this selector will trigger the
rule and perform the prevent / warn / audit action.
l Downgrade - only appears for Hierarchic selectors and
means that the user is permitted to downgrade the value of
a hierarchic selector, any attempt to raise the value (for
example, from Public to Internal) will trigger the rule and
perform the prevent / warn / audit action.
l Upgrade - only appears for Hierarchic selectors and
means that the user is permitted to upgrade the value of a
hierarchic selector, any attempt to lower the value (for
example, from Internal to Public) will trigger therule and
perform the prevent / warn / audit action
l Additional Values - only appears for Multiple selection list
selectors indicating that the user may add additional
values but may not remove any existing values set.
l Removing values - only appears for Multiple selection list
selectors indicating that the user may remove values but
may not add additional values.
l Increase Date - only appears for Date picker or Date offset
selectors, indicating that the user can set a date / choose a
new offset that results in a date later than any currently
applied date.
Dialog Description
l Decrease Date - only appears for Date picker or Date
offset selectors, indicating that the user can set a date /
choose a new offset that results in a date earlier than any
currently applied date.
If the Microsoft Office auto save feature is enabled in any of the
applications, the user warning messages may be displayed
when the auto save feature executes.
This dialog also appears when warning users that they are about
to view / send an item that includes a date selector item that has
expired. The check compares the date in the item classification
with the current local date. If the current local date is later than
the date in the item classification, the rule fires and the relevant
warn action taken.
Fix Option used so that (for example) the user's attention is drawn towards
the action they are about to perform or to remind them of site
process requirements they should follow prior to sending a
message or saving / printing a document. Such rules will take
effect every time a message is sent, or document is saved or
printed.
Dialog Description
Suggested used to check aspects of the document/message (as defined by
Classification the associated conditions) and to suggest modifications to the
current Classification. If one applicable Suggested Classification
sets a value for a selector and another applicable Suggested
Classification clears that selector, then Classifier stops the
process and the defined Warn action is invoked using the
'cannot be applied' message. If one or more Suggested
Classifications are applicable, Classifier tries to apply each of
the applicable Classification settings. Classifier uses its high-
water mark algorithm to determine whether a defined selector
value should be applied. It then takes notice of any Clear
settings.
Dialog Description
Mandatory used to define what checks should be applied to ensure that the
Selectors label chosen meets label validity criteria, that any Selector set
as Mandatory has a value chosen.
Different rules can be defined for different applications. So a
selector may be Mandatory for documents (for example, an
archive annotation), but might be irrelevant to emails. You might
also have a label value related rule that requires a value for one
Selector only if another Selector has a particular value.
NOTE:
For more information when this rule fires for an Outlook
Show label dialog, see Show Label Dialog on Send on page
110.
A single check these mandatory selectors rule may be
defined for SharePoint which will apply to all document
types. See SharePoint Classifier Guiden for usage.
The operation of this rule is limited under CAD Classifier for
DraftSight. If a rule triggers, a warning is displayed to the
user, but the action cannot be cancelled regardless of the
buttons visible.
Dialog Description
True or False if you select True, the user can perform a task within the policy,
such as removing watermarks or images.
Content Matchers allows you to select a specified content matcher for the rule and
allows the user to review which content was identified by the
content matcher. See Matchers on page 83. Embedded images
are excluded from Outlook Content Checks.
You can allow multiple rules of this type. This means that if there
are duplicate rules, Classifier will action all rules including
duplicate ones. This can lead to multiple policy check dialogs
appearing.You can also show highlighted content matches if the
user wants to see details of the matches found. Ensure Enable
search highlights from external server is enabled in Adobe
Reader or Adobe Acrobat.
HKCU\Software\Microsoft\Office\15.0\Common\DRM\AdminTemplatePath
which should contain an expandable string that points to the file store where the admin
templates are kept.
NOTE: You can define two rules for the same application at the same point in the rules tree.
This potential conflict is resolved by the rule highest up the tree taking preference (see
Rearranging the Order of Rules on page 161).
NOTE: These actions will only be available if there is more than one rule applicable to the
application and there is a rule above (Up is available) and/or there is a rule below (Down is
available).
Editing a Rule
To edit a rule:
Copying a Rule
You can create a rule using another as a base. To do this, you must first copy the rule you want to
use as the base.
To copy a rule:
1. Select a rule in the rule tree.
2. Click Copy Rule.
3. Select one of the nodes: Always, No Label, or Any Label.
4. Click Paste Rule.
The new rule appears with the name: <Application name>.<Rule name: (1).
5. Click Edit Rule, and make the necessary changes, including giving it a new name.
6. Click OK.
Deleting a Rule
To delete a rule:
1. Select a rule in the rule tree.
2. Click Delete Rule.
3. Click OK to confirm the deleting of the rule.
Suggested Classification
This feature allows you to define one or more Suggested Classifications for a policy. These can
then be referenced in Check for suggested classification rules such that when a document is
saved or printed or a message is sent, the Suggested Classifications are evaluated and the
appropriate action is performed.
Each Suggested Classification has one or more Conditions defined (stored in the Condition
Library), and Selector settings that indicate either a selector value is be applied, and/or that a
selector should be cleared.
NOTE:
l Suggested Classification are only supported by Outlook, Word, Excel, PowerPoint,
Project, and Visio.
l You cannot specify text and date selectors in a Suggested Classification.
l Currently, suggested classifications are only triggered if you enable the ‘check for a
suggested classification and automatically apply’ rule. This change will allow the user
to trigger the Suggested Classification manually by selecting a button from the Ribbon
Bar or from within the Labeller UI.
l If you run the suggested classification manually, the suggested label will automatically
be calculated and shown in the Policy Check dialog. If we fail to suggest a label, a
message box would be displayed to inform the user, for example, "Document was set
to the suggested classification" / "Unable to determine a Classification for the
document".
l If you as the Admin have enabled the original ‘check for a suggested classification’ rule
and this new manual option was also enabled, then both will apply. So even if the user
manually triggered the suggest label, when they save, send, or print the document, the
rules will also be triggered, including the ‘check for a suggested classification and
automatically apply’ rule.
l This manual option will only be applicable to the outer labeller UI, that is, not the inner
labeller UI which can be launched from within the Policy Check dialog.
l A Policy Dialog Summary label button will be disabled when displayed from a Use
Suggested manual operation to avoid looping.
NOTE: : If enabled, the policy check result will display a checkbox to allow the user to 'Don't
show this warning again.' This check only applies to Microsoft Office Documents, it is not
applicable for Outlook.
Changing Priorities
When deriving an Intelligent Default, a Classifier product will take the configured default label as
the starting point for the Intelligent Default. It will then determine which Default Labels have a
matching condition attached to them. These will be processed in turn, starting with the lowest
priority, and the values for each applied to the Intelligent Default label. See Adding a New Policy
on page 134 You can change the priority.
To change the priority:
1. From Labelling Configuration, select Policies.
2. Select a policy and click the Default Label tab.
3. Select a label, and select either Increase Priority or Decrease Priority.
no user involvement.
l If Warn, Prevent or Challenge is set, then email message is interrupted and a
warning dialog appears indicating the problem and displaying options as to how to
proceed (such as remove unapproved recipients or change unapproved message
label).
l If Recipient Checks are performed, then the membership of any expanded distribution
group (DG) as governed by Always use Distribution List clearance is also checked.
l For Outlook Emails only, if a member of a DG is ‘removed’ as part of the Remove action
then the DG is replaced by the expanded set of ‘cleared’ members prior to submission.
NOTE: You should probably establish a domain clearance setting for your own (internal)
domain, and it may be useful to establish a default (minimal) domain clearance to handle any
recipient addresses that do not match any other configured domain clearance.
4. Check Include subdomains if you want the clearance to apply to all subdomains of that
address space. For example, an address space of abc.xyz with Include subdomains
checked would apply to domains with addresses of pqr.abc.xyz or lmn.abc.xyz etc.
5. Select the checkboxes for which the Label values that the domain is cleared.
6. Click OK.
The domain clearance entry will appear in the summary list pane.
1. Select Labelling Configurations > Clearance Settings > Email Domain Clearance
Configuration.
2. Select an entry.
3. From the Actions pane, select Edit email domain clearance.
4. Make the necessary changes and click OK.
Clearance Library
The Clearance Library allows you to define Clearance definitions which can then be used by
Classifier SharePoint (2016) to apply clearance based control to the items being inserted into a
SharePoint (2016) library. That is, an item can only be inserted into a Library if its label is allowed
by the clearance associated with the Library.
Each defined Clearance has a Clearances Default Labels defined. Clearances are listed
alphabetically.
Editing a Clearance
To edit a clearance:
1. Select Labelling Configurations > Clearance Settings > Clearance Library.
2. Select a clearance.
3. From the Actions pane, select Properties.
4. Make the necessary changes and click OK.
Deleting a Clearance
To delete a clearance:
1. Select Labelling Configurations > Clearance Settings > Clearance Library.
2. Select a clearance.
3. From the Actions pane, select Delete.
4. Click Yes to confirm deletion.
NOTE: SharePoint Classifier associates the Clearance Name with a Library and then
uses that Name to access the actual Clearance from the Classifier Configuration. If the
Clearance Name cannot be found in the current Configuration, then no clearance
checks will apply to the library.
Dynamic Clearances
Dynamic Clearances allow you to define Clearances that will be determined at run time based on
User property value conditions.
NOTE: The Classifier Mail add-in only supports user property value conditions based on a
user’s SMTP address.
Deleting a Clearance
To delete a clearance:
1. Select Labelling Configurations > Clearance Settings > Dynamic Clearance.
2. Select a clearance.
3. From the Actions pane, select Delete.
4. Click Yes to confirm deletion.
l Dynamic Clearances:
ach client is started and retrieves the updated configuration information.
If rules are defined and the originator / all recipients are cleared for information/ attachments
within the current email message label, then email message submission continues uninterrupted
regardless of whether Warn or Prevent is chosen.
If the originator or recipients fail the clearance check, then the effect is dependent upon the
Warn/Prevent or Challenge setting in the Rule definition:
l If Audit only is set, then the occurrence is audited and the email is submitted but requires no
user involvement.
l If Warn, Prevent, or Challenge is set, then email message is interrupted and the sender
sees a dialog indicating the problem and how to proceed defined by the Rule.
NOTE: If Recipient Checks are performed, then the membership of any expanded
distribution group (DG) as governed by Always use Distribution List clearance is also
checked. For Outlook Emails only, if a member of a DG is ‘removed’ as part of the
Remove action, then the DG is replaced by the expanded set of ‘cleared’ members
prior to submission.
l Favourites
l Portion Marks
l Document properties in Marking Formats, Content Checking.
l The Add Category to message rule is not supported by OWA / Mail Add-in Classifier: since
Folder View Labelling (Outlook) is not available, the category can only be set on Sent Items
and the feature would be incomplete.
l Whilst OWA / Mail Add-in supports the Help links defined in a Classifier Configuration, the
nature of accessing these environments may mean that a defined link is not accessible due
to external access controls (e.g. additional authentication requirements).
l The nature of the OWA / Mail Add-in environments means that checking must take place at
the Server (when the message is sent) and the error handling interactions do not always
operate quite the same as in the Outlook client. In particular, Attachment labels are not
checked until the message is sent and it is not possible to support an equivalent to the
Automatically elevate email label feature.
l The server tends to run for extended periods and changes to the configuration do not take
place in the same manner as for a client (where closing and restarting all Classifier
supported applications will ensure the latest configuration is used by a desktop client).
l The end user experience may vary in some scenarios.
l Mail Add-in: On send, Classifier add-in code is invoked and Classifier performs any checks
required. If Classifier checks pass, all configured markings are applied. Note that
subsequent checks by OWA/Mail Add- in (e.g. no recipients), or indeed other add-ins, or
user (e.g. no Subject) may cause message submission to be halted with the draft message
now showing the marking information. This is different to Email Classifier where Classifier
is invoked after Recipient / Subject checks etc.
Deploying Configuration
NOTE: If you wish to Publish the Classifier Configuration via Active Directory, the Active
Directory Schema must be updated ( see Extending the Active Directory Schema on page
205). Schema update is not required if you intend to Publish the configuration via file store.
If you want to use the optional Classifier Management Agent, install and configure it as described
in the Management Agent Guide.
The schematic below shows logically how the Classifier configuration is deployed.
NOTE: If you Publish the configuration to File Store, ensure that the target (Master) location
has suitable permissions. End users should have the ability to read from that location and
Administrators, who are modify the Master configuration, must also have the ability to write to
that location using the network path.
NOTE:
l OWA Classifier is configured per server, and all users of that OWA server will
operate under the Configuration and Policy used by that server.
l OWA Classifier only changes its configuration after a restart. Thus after
publishing an updated configuration, an IISRESET would be required to cause
OWA Classifier to use that new configuration.
l If you are using Group Policy mechanisms, the Client operation relies on the
Group Policy settings reaching the client. If the effects are not as expected you
should run regedit and check that the relevant entries are present. Running
GPUPDATE /Force may be of assistance. Check that the client machine is
properly recognised in the domain - removing and re-introducing the client can
resolve this issue.
l If a user is a member of more than one grouping you can use Group Policy
Resultant set of Policy (RosP) to establish the configuration they will actually get
(i.e. the Classifier Policy they will use).
l ClientServerOverride
l LabelConfiguraiton
l Policy
l PolicyFileClassifier
l PolicyOutlook
l ServerFileSystemRoot
l ServerRootType
l UseWebServer
l ValidityPeriod
in the following registry locations in the order shown:
l HKEY_CURRENT_USER\ SOFTWARE\Policies\Boldon James\ConfigManager
l HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Boldon James\ConfigManager
l HKEY_LOCAL_MACHINE\SOFTWARE\Boldon James\ConfigManager
NOTE:
l If more than one service (OWA Classifier, SharePoint Classifier, etc.) is installed on a
single system, they will all use the same registry settings. For these services, use of
ServiceMode (items 1 or 2 below) is recommended as it ensures separation of registry
key usage by these services and other Classifier applications (e.g. Email and Office
Classifier) running on the same system.
l For 64-bit machines that are to run 32-bit Classifier applications (e.g. Management
Agent), items 2 and 4 above would need registry keys establishing under:HKEY_
LOCAL_MACHINE\SOFTWARE\Wow6432Node\Boldon
James\ConfigManager\ServiceMode or HKEY_LOCAL_
MACHINE\SOFTWARE\Wow6432Node\Boldon James\ConfigManager.
Each will look for relevant registry settings (Blank = Not used by that service):
l HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Boldon
James\ConfigManager\ServiceMode
l HKEY_LOCAL_MACHINE\SOFTWARE\Boldon James\ConfigManager\ServiceMode
l HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Boldon James\ConfigManager
l HKEY_LOCAL_MACHINE\SOFTWARE\Boldon James\ConfigManager
Environmental Requirements
l Windows OS architecture (32 or 64-bit)
l Client application architecture (32 or 64-bit)
l Configuration store type (AD, File Store or Web Server)
l Path / URL for the configuration (If using File Store or Web Server)
l Classifier Configuration Name
l Classifier Policy Name Registry Setting Locations
NOTE:
When the same key is specified in multiple locations the highest location from the list
below will be used. Locations including `under the Policies subtree’ are typically set via
Group Policy and should not be manually updated.
l Classifier Registry Settings can be added to any of the following locations: HKEY_
CURRENT_USER\SOFTWARE\Policies\Boldon James\ConfigManager*
l HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Boldon James\ConfigManager*
HKEY_LOCAL_MACHINE\SOFTWARE\Boldon James\ConfigManager†
When using 32-bit client applications on a 64-bit Operating System, the registry settings
need to be placed under the equivalent Wow6432Node: HKEY_LOCAL_
MACHINE\SOFTWARE\Wow6432Node\Boldon James\ConfigManager
If a customer’s environment consists of 64-bit OS machines running a 32-bit version of
Microsoft Office, the following should be considered when deploying File Classifier 64-bit
and Email and Office Classifier 32-bit. To ensure both applications are covered, the registry
keys should be created under one of the three sets:
File Classifier will use the 64-bit location and Email and Office Classifier will use location.
Note: The HKLM\SOFTWARE\Policies area is shared by both 32 and 64-bit applications.
l HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Boldon James\ConfigManager
l HKEY_LOCAL_MACHINE\SOFTWARE\Boldon James\ConfigManager
l HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Boldon
James\ConfigManager
l HKEY_CURRENT_USER\SOFTWARE\Policies\Boldon James\ConfigManager
l HKEY_CURRENT_USER\SOFTWARE\WOW6432Node\Policies\Boldon
James\ConfigManager
You can generally set up relevant entries under any of the supported registry locations. However,
the algorithm expects to find the following as 'pairs' under a sub-tree:
l Label Configuration + Policy
l ServerRootType + ServerFileSystemRoot (if relevant)
Active Directory
Name Type Value
This is only required if the deployment is using File
Store or Active Directory (i.e. this setting is not
ServerRootType REG_ required if the deployment is using Web Config).
DWORD
1 The configuration is held in Active Directory.
File Store
Name Type Value
Service Mode Configuration Distribution Server
Type Note: This is only required if the
deployment is using File Store or Active
ServerRootType REG_ Directory (i.e. this setting is not required if the
DWORD deployment is using Web Config). 0 The
configuration is held in File Store
(ServerFileSystemRoot key is then significant).
Service Mode File-Based Configuration
Location Note: Only required if
ServerRootType = 0
The path to the location that holds the
ServerFileSystemRoot REG_SZ Classifier Configuration folder.
For remote locations, this value should be
specified as a full UNC path, rather than using
Drive letters.
LabelConfiguration REG_SZ Service Mode Label Configuration Name
The name of the label configuration to use. e.g.
Classifier test.
Policy REG_SZ The name of the Classifier policy to use in the
Label Configuration.
Web Server
Name Type Value
Additional Considerations
l Spelling Mistakes: Make sure both the name and value of each registry key is spelt
correctly. The Classifier Support Tool can be used to quickly and easily verify this.
l Permissions: Ensure the users have read access to the configuration folder, this can be
checked by navigating to the value from ServerFileSystemRoot or WebServerConfigFile for
file Store and Web Server respectively.
l Competing Registry Locations : If the registry keys appear correct with no spelling mistakes
and users are able to navigate to the configuration another possibility is conflicting keys in
another location. To ensure this is not the case, first remove all Classifier settings and then
manually re-add the required keys to one location.
l Verification : After verifying the registry keys are correct, restart all Office applications. if the
issue has not been resolved then the Classifier add-in may not be installed, the incorrect
version may be installed (32 vs 64-bit) or, the add-in may be disabled. The configuration
cache should be cleared.
NOTE: For Management Agent, OWA Classifier, and SharePoint Classifier,we recommend
that registry entries are established under ServiceMode (see Label Configuration Registry
Settings on page 189).
10. Select User Configuration > Administrative Template > Classic Administrative Templates >
Boldon James > Label Configuration.
12. Select Label Configuration Name and choose Properties. Ensure that it is enabled and
enter the name of your Configuration (e.g. Classifier test). Click OK .
13. Select Policy Name and choose Properties. Ensure that the setting is enabled and enter the
name of the policy applicable (e.g. All Users). Click OK .
14. If you need to set the Configuration Validity Period, then select Downloaded Configuration
Validity Period and choose Properties.
15. Ensure that it is enabled and enter the required validity period in hours. Setting a value of 0
(zero) will restore default operation so that the Configuration validity is checked each time a
Classifier enabled application starts. Click OK .
NOTE:
If when upgrading to a later version of Classifier Administration the settings supported by an
ADM file have been extended, you will have to Remove the old template before adding the
new ADM file. The precise steps will depend on your environment.
10. Select the relevant sub-tree and configure the settings as required.
NOTE:
We recommend that registry entries are established under ServiceMode (see Label
Configuration Registry Settings on page 189) for Management Agent, OWA Classifier,
SharePoint Classifier.
A full description of all the Registry settings relevant only to the Management Agent can be
found in the Management Agent Guide.
The example below shows entries under ...\Policies\Boldon James\ConfigManager. You can
generally set up relevant entries under any of the supported registry locations and the
precedence if entries appear in more than one sub-tree. See Configuration Registry Search
Algorithm on page 177. However, the algorithm expects to find the following as 'pairs' under a
sub-tree:
l Label Configuration + Policy
l ServerRootType + ServerFileSystemRoot (if relevant)
Registry Settings
The Entries (and Policy setting name ) listed below are established under ...\Boldon
James\ConfigManager. For more detailed information see the Classifier Registry Keys
Deployment and Troubleshooting Guide.
0. (Default)
Feature is
disabled.
1. Auto enables
'Different First
ExcelAutoEnableDifferentFirstPage REG_
Page'
DWORD
header/footer
on the first
worksheet of a
workbook.
2. Auto enables
'Different First
Page'
header/footer
on all
worksheets of
a workbook.
0. (Default)
Feature is
disabled.
1. Auto enables
'Different
ExcelAutoEnableDifferentOddEvenPages REG_
Odd/Even
DWORD
Pages'
header/footer
on the first
worksheet of a
workbook.
2. Auto enables
'Different
Odd/Even
Pages'
header/footer
on all
worksheets of
a workbook.
0. (Default)
Classifier
footer markings
will be added to
all the slides in
the
presentation.
1. Classifier
markings footer
will be added to
the First slide
only of the
presentation.
2. Classifier
PowerPointSlideMarkings REG_ markings footer
DWORD will be added to
the Title slides
only of the
presentation.
3. Classifier
markings footer
will be added to
all slides
Except the first
slide of the
presentation.
4. Classifier
markings footer
will be added to
all slides
Except title
slides of the
presentation.
5. Classifier
markings footer
will be added to
None of the
slides of the
presentation.
1. Install the Classifier Schema Extension package from the Classifier Schema Extension
sub-folder of the Classifier Administration in the Base Bundle using either the .msi file or
Setup.exe.
2. From the Start menu locate All Programs / Boldon James / Administration Tools.
NOTE: Extending the schema is a non-reversible operation.
Deploying Software
Desktop Clients
Email and Office Classifier and Notes Classifier can be deployed via standard MS Group Policy
mechanisms using the appropriate EMailAndOfficeClassifier.MSI or NotesClassifierClient.msi
files. The license (distributed as part of the Configuration) controls the applications to which you
have access.
Classifier Administration
Classifier Administration must be installed on a central (Administrator) server that can be
accessed by the designated administrators via a web browser. Classifier Administration controls
access to features in accordance with the Licenses applied. The license information is distributed
as part of the Configuration and is utilised by client applications to determine which features are
presented to users.
NOTE: There is no associated license file for this component - you are granted the rights to use
it through the client license you purchase.
NOTE: This section describes functionality available in the current version. Classifier product
versions prior to this may support only a subset of features described below. In the text below,
BJ label refers to a custom Classifier property that holds the Label value in an encoded form.
This is usually converted to a Summary Marking if it is to be presented to a user. It is
sometimes referred to as the 'SISL' label. [For Visio documents BJ label is stored as a
'Solution XML Element', rather than a document custom property]
Excel can save as HTML, but does not store custom properties so is unlabelled if opened
subsequently.]
By default, File Classifier / Power Classifier stores label information in the ADS (not available to
Outlook). A specific plug-in (3) can be configured that will cause FC/PC to store the label
information as meta-data that can be accessed by that same plug-in meaning it will be accessible
to Outlook (for attachment checks).
Label information set by File Classifier / Power Classifier is not available to Office Classifier. Thus
MS Office applications and File Classifier may manifest different label values for the same file.
3. (3A - Exchange Classifier Only) Support for these requires additional configuration of Classifier
Plugins under guidance from Classifier Customer Support.
4. Visio
Visio must be installed on the platform for this to work (e.g. so not supported under SharePoint).
Visio is launched to access a Visio file, so can incur a significant overhead (e.g. HWM checks in
Outlook).
5. Word and Excel can save documents as other types (e.g. Word to TXT and Excel to CSV).
Such Save actions will typically indicate to the user that some information may be lost. Classifier
labelling and marking information may be lost.
6. Saving as PDF: You can populate various standard document properties ( Title, Author,
Subject and Keywords) that will be propagated if you save an Office document as PDF. However,
Office applications do NOT propagate any Custom Properties to the PDF. In particular the
bjDocumentSecurityLabel is NOT propagated. Email, OWA and Notes Classifier will check
defined Label Locations for recognisable labels in standard PDF file properties for the Check for
the high-water mark and Add an attachment list rules. File Classifier, Power Classifier and the
Classifier API (API is only supplied to support integration with technology partner products) can
set the relevant custom properties of a PDF document.
Visio (4) vsd, vss, vst, vsdx [vsdx BJ Label custom property, Supported
(2010>) support introduced in document label locations.
Classifier 3.5]
NOTE: Visio must be installed for
labels to be accessible, and Visio
checks are never performed under
OWA for example.
Application Operation
Application Notes
Office Open:
Classifier
l For the supported document types (see tables above) it uses the
BJ label value if it exists, otherwise it checks configured locations
to determine the current label value.
Save:
l For the supported file extensions (above) it sets the current BJ
label , plus any Markings defined by the configured rules.
l For all other document types (e.g. PDF, RTF, TXT etc.) markings
may be applied (using configured rules) to the document
properties (e.g. Author, Header). These markings may be visible
in the saved item, but there is no separate BJ label available to
other applications. Other Classifier applications (e.g. Email
Classifier) may see the file as unlabelled.
See notes above (1,3) regarding Open Office documents. See
notes above (2,3) regarding HTML documents.
Email Open:
Classifier
l Received messages use the BJ label value if it exists, otherwise
OWA check configured locations to determine the current label value.
Classifier l When performing operations on attachments (not Mobile
Notes Classifier) relating to high-water mark or Attachment list rules:
Classifier l Try to ascertain a label for each item as per 'Label may be found
from' in the table above. Attachment types that are not supported,
Mobile or not configured are treated as unlabelled.
Classifier
Save/Send:
Mail Add-in
l Sets the current BJ label , plus any Markings defined by the
configured rules to message properties when the message is
Saved or Sent.
CAD Open:
Classifier
l For the supported document types (see tables above) it uses the
BJ label value if it exists, otherwise it checks configured locations
( Supported document label locations ) to determine the current
label value.
Save:
l For the supported file extensions (above) it sets the current BJ
label , plus any Markings defined by the configured rules.
Classifier API Read:
(Only l For the supported document types ( dll, zip, pdf, html, jpg, xls,
supplied to xlsx, ppt, pptx, vsd, doc, docx, mpp, odp, ods, odt, msg, pdb, txt,
support xps ) it uses the BJ label value if it exists, otherwise it checks
integration configured locations to determine the current label value.
with
technology Write:
partner l For the supported file extensions (above) it sets the current BJ
products.) label , but no rules (e.g. markings) are applied. See Classifier API
documentation for run-time parameters.
Note: Visio files can only be accessed if Visio is installed AND
there is a significant overhead as Visio will be loaded for each
document accessed.
Box Read:
Classifier
l For the supported document types ( dll, zip, pdf, html, jpg, xls,
xlsx, ppt, pptx, vsd, doc, docx, mpp, odp, ods, odt, msg, pdb, txt,
xps ) it uses the BJ label value if it exists, otherwise it checks
configured locations to determine the current label value.
(Any information held in the Alternate Data Stream is lost when
uploaded.) Write:
l Box Classifier never changes any document.
NOTE: Note: The Open operational above described the general order when trying to find a
label value. This can be reversed by the Check label Locations first setting.
General Limitations
l Any Classifier label assigned to an RMS or S/MIME protected item will only be available
when the item is fully opened by a suitable application, so File / Power Classifier, Email
/OWA / Notes Classifier and SharePoint Classifier does not have access to labels in these
circumstances.
l Attempts to Write a label value fail if the file is Read Only, or if the file is in use by another
application.
l Attempts to Read a label may fail if the file is in use by another application.
l Attempts to Read or Write a label fail if you do not have permission to access the file, or the
file is RMS protected or encrypted.
l Attempts to Read or Write a label fail if the file is masquerading - i.e. the content does not
match the file extension (e.g. .TXT renamed as .DOC).
Plugins
Label recognition is performed by a Classifier component that is common across the Classifier
applications. This component utilises information held in an XML file (DocLabeller2) in a Plugins
folder in the configuration:
The file contains a section for each file type supported, defining information such as the file
extensions relevant to the file type, the (Write) properties that Classifier supports and the DLL
used to process that file type:
Support for new file types, and extending support for existing file types may require updates to
Classifier software (for example, a new DLL) and / or changes to this XML file.
The initial contents of this XML file are generated when the first Classifier Configuration is
generated and the file is propagated as part of the Classifier Configuration.
The following general sequence should be followed to modify and propagate changes to
DocLabeller2 :
l Ensure any Classifier Client, Administration and Server software changes are applied and
deployed.
l Get the current master configuration using Get Server Configuration . The retrieved
configuration is stored under ...\Boldon James\Configuration as outlined in Configuration
Archives .
l Make the necessary changes to ...\Label Configurations\Plugins\DocLabeller2 .
l Publish the updated Configuration using Publish Configuration .
l The changes will become effective in the applications in due course.
Now consider a number of instances of the same basic Rule (for example, Outlook FLOT) each
with its own Label match criteria:
Creating the rules above results in the following rule tree structure:
The rule overlap algorithm operates on the basic premise that the more specific the label
matching criteria, the higher the weighting of the rule (higher weighting wins). Selector ordering is
taken into account (the second selector in the policy has a higher weighting than the first selector
etc.).
The table below shows all the possible values of the selectors defined above, and which rule each
possible combination triggers. Rule 2 is the catch all rule that applies if there is no more specific
match.
Now consider a Label value of “Public; Finance; Europe” – it matches every single rule defined
above with the exception of Rule 1 (No Label) will only match if no label value is selected.
Classifier must pick the ‘ best ’ match. This appears fairly easy because Rule 8 is an exact match
for all three elements. However, if Rule 8 was not defined the answer is less obvious.
So ignoring Rules 1 and 8 in this instance, the algorithm can be summarised as follows:
Any Rule that has a specific match for the Region (most significant selector) is ‘better’ than any
Rule that only has an <Any> or <Not Relevant> or <Always> match for Region. Hence Rules 3, 4,
6 and 7 are immediately ‘better’ matches than Rules 2 and 5 can be ignored in the next
refinement.
Now considering the preceding Selector (Department) in the policy, any rule that specifically
matches the Department value is ‘better’ than a Rule that has only an <Any> or <Not Relevant> or
<Always> match. Hence Rules 3 and 6 are ‘better’ than Rules 4 and 7.
Finally considering the first Selector (Designation) the <Any> is ‘better’ than a <Not Relevant> or
<Always> match which means that Rule 6 is ‘better’ than Rule 3, hence Rule 6 is the ‘best’ match.
If Rule 6 is subsequently deleted, then Rule 3 would be the 'best' match for this example label
value.
Office and Email Classifier and Classifier Administration include a Trace Viewer diagnostic tool
that may be used under guidance from Classifier support.
The Boldon James tracing tool allows tracing options to be set for Email and Office Classifier.
BJTrace is installed during the Email and Office Classifier installation procedure. It is also
installed with Classifier Administration and Clearance Service. To run the tool BJTrace is located
at: C:\Program Files\Common Files\Boldon James\Logging\BJTrace.exe. Click the BJTrace.exe
icon to start the application.
Note: There are two versions of the bjlogger (32 and 64-bit). Logging from 32-bit applications may
be displayed in viewer windows in the 64-bit bjtrace, and vice-versa. Whilst this may not in itself
be an issue, it can be confusing because (for example) changes made to the logging settings from
the 64-bit bjtrace environment will have no effect on logging from a 32-bit application seen in a
viewer window in that environment (and vice-versa).
Note: It is important that the size of the memory-mapped file (used to hold logging output) is the
same in both 32 and 64 bit environments. This is the default, and the default size is usually
sufficient. Having different sizes defined in the 32 and 64 bit environments is likely to lead to a
crash if the file is initially created using the smaller size.
Alternatively, the other way round, you may see the following messagebox displayed:
"MapViewOfFile failed: error=5” if you attempt to open a viewer window in bjtrace. The memory
map file size setting is accessed from bjtrace, Tools/options menu item, select the Advanced tab,
and there is a textbox for configuring the shared memory size.
To enable logging of any of the Classifier component products:
1. Run the BJTrace tool.
2. Select File /Application Information, then select the application to be traced.
3. Select Edit Settings .
4. Choose the appropriate application component name and set the logging level and
destination.
5. Click OK and all logging that meets or exceeds the chosen log level will be sent to the
viewer or file as configured.
NOTE: Some environments may not have the necessary permissions to configure
logging levels, and therefore, the administrator may have to logon to establish the
environment for an actual diagnostic session.
NOTE:
Not all events may appear for each application. For example OWA does not support Portion
Marking, so it will never generate event 1125.
Warning entries can be produced either when a rule fires and causes the user to be involved,
or if a rule fires but is configured as Audit only.
21 Policy
22 User Clearance
23 Domain Clearance
24 User Defined Messages
25 Selector Library
26 Marking Format Library
27 Settings
28 Auditor
29 User Clearance
30 Default Label Check
31 User warning check
32 Admin: Marking Library
33 Admin Global Settings
34 Admin: User Message Library
35 Admin: Configuration Settings
36 Admin Policy Selector
37 Admin Policy Rule
38 Admin SMTP Domain Clearance
39 Admin Configuration Transfer
40 Content Inspection Check
41 Admin: Content Library
42 SharePoint Classifier Auditing
43 Admin UI Definitions
44 Maximum Subject length check
45 Minimum Subject length check
46 Recipient type check
47 Recipient count check
48 Message size check
49 Notes Classifier Auditing
50 S/MIME Auditing
51 RMS Auditing
52 Author label change check
53 Document Author property set
54 Reply to all check
55 Mandatory Selector check
56 Document Content Inspection check
57 Exchange Classifier Auditing
58 File Classifier Auditing
59 Response Recipients check
60 Label Expiration Check
61 Exchange Classifier Administration Auditing
62 Mobile Classifier Auditing
63 McAfee HDLP Check
64 Classifier CAD Auditing
65 Administration of Condition Library
66 Unlabelled attachment check
67 Suggested classification check
68 Box Classifier auditing
69 Admin: Clearance Library
70 SealPath
71 Attachment Clearance Check
72 Seclore Auditing
73 Document RMS Protection Check
Event Definitions
1000 Success Office Classifier initialised in application.
1001 Success Classifier running in Test Mode.
1002 Warning Classifier Configuration not found.
Classifier Licensing