Administration Server Guide
Administration Server Guide
Table of Contents
Classifier Administration Server Guide 9
Classifier Documentation 10
Common Label Handling Features 12
Label Propagation 13
Printable Labels 14
Recognition of received Label values 14
Mandatory Selectors 14
Default Label Values 14
Insert Marking as Field Code (Word only) 15
Document Properties (Office Classifier) 15
Message Properties (Email, OWA, Mail Add-in, Notes and Mobile) 16
Use of Templates 17
Common Label interface actions 17
Label Selection Interfaces 17
Ribbon Examples 18
Label Selection Dialog 19
Favourites 22
Portion Mark 23
Recently Used Labels and Portion Marks 24
Single Click operation 25
Assisted Labelling operation 27
Classifier Decision Tree 31
Decision Making Process Example 32
Configuration of the Decision Tree 34
Decision Tree in the Client 35
Mobile Classifier user interface 37
Label Options 38
Clear (Label value) 39
Default 39
Link to site defined help 39
Show Summary Marking 39
About Classifier 40
Folder View Labelling operation 40
Classifier Administration 43
Administrator Management Menu 44
Configuration Folder Paths 44
System Roles Management 45
Add a User or Group To a Role 47
Edit a System Role 50
Delete a User or Group from a Role 53
Custom Roles for Policies 53
Create a Custom Role 55
User Roles and Permissions 57
Properties (Classifier Administration) 59
Get Server Configuration 59
Publish Configuration 60
Configuration Archives 62
Permissions for Publish to AD 63
Audit non-privileged attempts to Publish Configuration 66
Configuration size estimation 69
Publish Test Configuration 70
Test Mode Administration 71
Lock / Unlock Configuration 73
Create Web Configuration 73
Settings Applicable Across the Organisation 76
Global Settings 76
Application Settings 77
Audit Settings 78
Languages 83
Licence 86
Features versus Licence 88
View Client Licence status 92
Image Library 93
Add a new image 94
Properties (Image) 95
p2
Classifier Administration Server Guide UM644001
Delete (Image) 95
User Message Library 96
Use of User Messages 96
Add a new message 98
Language (Message) 99
Properties (Message) 99
Copy (Message) 99
Delete (Message) 99
User Interface Library 100
Add a new UI definition 101
Properties (UI definition) 102
Copy (UI definition) 102
Delete (UI definition) 102
Properties (UI Definition Items) 103
Challenge (UID) 104
Classification History (UID) 106
Content Inspection Check (UID) 107
Decision Tree (UID) 109
File Classifier (UID) 110
Folder View Labelling (UID) 111
General Messages (UID) 114
Label Selection (UID) 115
Management Agent (UID) 117
Menus (UID) 118
Organise Fav ourites (UID) 119
Policy Check (UID) 120
Ribbon (UID) 122
RMS Apply Template (UID) 124
RMS Apply User Permissions (UID) 125
Labelling Configurations 127
Add a new label configuration 128
Properties (Label Configuration) 129
Delete (Label Configuration) 129
Selector Library 130
Selector Actions 131
Add a new selector 131
Mov e Up / Move Down 132
Language (Selectors) 134
Edit Selector 134
Single selection list 135
Multiple selection list 136
Text entry 138
Date picker 139
Date offset list 139
New (Selector v alue) 141
Properties (Selector v alues) 141
Buttons (Selector v alues) 143
Obsolete / Restore Selector 144
Activ e Obsolete and Retained Selectors and values 145
Delete (Selector) 145
Label Dominance 146
Marking Library 147
Add a new marking format 148
Properties (Marking Format) 148
Inserting a Selector Element 150
Text Display 151
Date Format 153
Marking Selector options 154
Inserting a Hyperlink 156
Inserting an Env ironment Property 157
Inserting a Document Property 158
Inserting a Directory Attribute 160
Font options and Rich Text Formatting 161
Align Text 161
Preview a Marking Format 161
Copy (Marking Format) 162
Delete (Marking Format) 164
Content Library 165
p3
Classifier Administration Server Guide UM644001
p4
Classifier Administration Server Guide UM644001
p5
Classifier Administration Server Guide UM644001
p6
Classifier Administration Server Guide UM644001
p7
Classifier Administration Server Guide UM644001
p8
Classifier Administration Server Guide UM644001
In addition, a list of actions is presented at the bottom of the Actions Pane relevant to the item
selected in the middle pane. Summary Marking - Properties, Copy and Delete in the
example below.
Summary Marking.
p9
Classifier Administration Server Guide UM644001
If you are new to Classifier, it is recommended that you read the Classifier Getting Started Guide.
Environment requirements are defined in Release Notes. Environment deployment options are defined in
the Classifier Evaluation Guides.
Note: Classifier Administration's target environment assumes screen resolutions of 1280 * 800 or
better. The application can run at smaller resolutions, but some operational issues may be encountered,
particularly using minimal screen sizes. For example, running Classifier Administration in Windows Safe
Mode can result in a screen resolution of 640x480. The interface will be mostly useable, but exceptions
such as Buttons at the bottom of some dialogs (Rules Wizard, Clearance Wizards) are hidden behind the
taskbar (Window s 7). Auto hiding the taskbar may help in this circumstance.
Classifier Administration
Settings applicable across the organisation
o Global Settings
o Image Library
o User Message Library
o User Interface Library
Labelling Configurations
o Selector Library
o Marking Library
o Content Library
o Configuration Settings
Policies Configuration Settings
Clearance Settings
Email, OWA, Mail Add-in, Notes and Mobile Differences
Configuration deployment
Software deployment
The various topics provide details of which Classifier applications support which features.
Note: Actual default values depend on the Configuration Template used to establish your configuration.
Where this document defines default settings, it assumes the ‘Empty’ Configuration Template has been
used.
Classifier Documentation
The following documents can (mostly) be found under the Classifier Administration folder on the
Classifier Product Suite Base bundle.
Note: user specific documentation is not supplied with any of the Classifier client side products. Instead
Email, Office, OWA and Notes Classifier support the ability to invoke URL links to an organisation defined
w ebsite, intranet or similar to provide guidance relating to their own labelling terminology. This is
implemented through Classifier Configuration.
Overview Documents
Suite Overview The starting point for those new to the Classifier product family. It
introduces terminology used by the Classifier family of products; provides
examples of how Classifier Labelling appears to the user; provides a
summary of the part that may be played by Active Directory when
deploying Classifier applications; and summarises some of the key
p10
Classifier Administration Server Guide UM644001
Getting Started Shows you how to quickly install Classifier Administration Server and Email
Guide and Office Classifier products; establish a test configuration on a Windows
desktop and begin to explore the user effects of that configuration.
PowerShell Getting Shows you how to quickly install Classifier Administration Server's
Started Guide Pow erShell feature, establish a test configuration using PowerShell
commands and begin to explore the user effects of that configuration
Administration If you are familiar with Classifier Administration Console, this guide
Transition Guide highlights key differences w ith the Classifier Administration Server. It
show s you how to quickly transition to using Classifier Administration
Server to maintain your Classifier configuration.
Deploym ent Documents
Planning Describes the various steps and considerations from initial familiarisation
Considerations through to live deployment of the Classifier products.
Evaluation Documents
Evaluation Guide Describes how to create and configure a working system that you can then
use for evaluation or testing.
Reference Documents
Administration Server The PDF version of the Classifier Administration Server on-line Help,
Guide providing full details of the various features and options supported by the
Classifier applications. It describes Email Classifier, Office Classifier, OWA
(This document)
Classifier, Mail Add-in, Notes Classifier and Mobile Classifier features.
Administration Server Describes installation of the Classifier Administration Server product.
Installation Guide
Management Agent Describes the features provided by the optional Classifier Management
Agent.
Mobile Classifier Describes installation of the Mobile Classifier Service product. The product
Service Installation is a proxy server that allow s the Mobile Classifier App running on mobile
Guide and tablet devices to access Microsoft Exchange and/or Office 365
p11
Classifier Administration Server Guide UM644001
Label Propagation
Printable Labels
Recognition of Received Label values
Mandatory Selectors
Default Label Values
Insert Marking as Field Code (Word only)
Document Properties (Office Classifier)
Message Properties (Email, OWA, Mail Add-in, Notes and Mobile)
Use of Templates (Office Classifier and Outlook)
p12
Classifier Administration Server Guide UM644001
Label Propagation
Classifier product architecture defines how products will operate to ensure that label information applied
under one Classifier application can be recognised and processed by another Classifier application, or
indeed a suitable third party application.
Office Classifier stores label information in the properties of a document allowing other Classifier
applications to process the object according to the rules defined by the site.
Email Classifier, OWA, Notes and Mobile Classifier store label information in custom properties of a
message allowing other Classifier applications to process the object according to the rules defined by
the site.
Label Propagation includes the following configurable features:
Use label values in templates as the initial label values for any derived item (see Use of Templates).
Recognise and use label values from a received message as the initial label value for any reply or
forward of that received message.
The ability in Email, OWA and Notes Classifier to ensure that the label associated with the email
message ‘dominate’s all labels associated with any Classifier labelled attachments (documents or
messages; or for emails only - Portion Mark). This usage is described further in the section Check for
the high-water mark.
Note: Further details of how one Classifier application handles label values assigned by another
Classifier application can be found in the section Appendix - Label Propagation Mechanisms .
Note: Saving a document as another type (e.g. Word --> TXT or EXCEL --> CSV prompts that
information will be lost. The Classifier label information is one of the casualties of such operations.
p13
Classifier Administration Server Guide UM644001
Printable Labels
Office Classifier allows label values to be stored as markings in a variety of document locations that
w ill appear when printed including:
Header
Footer
Watermark (Word only)
Field codes (W ord only)
Portion Mark (Word, Pow erPoint and Excel)
Email, OWA, Mail Add-in, Notes and Mobile Classifier allow markings to be assigned to content
and/or properties that are normally included in printed material:
FLOT
LLOT
Start and/or end of Subject
Portion Mark (Outlook only)
Note: Printing uses standard Outlook / OWA / Notes mechanisms. Therefore if the only label value on
an email message is an X-Header then any hardcopy of the email message will be effectively unlabelled.
Mandatory Selectors
Each Selector may be designated as Mandatory through application specific Check these mandatory
selectors rules as described in Check rules.
Mandatory selectors are indicated on the label selection interface by an asterisk ( *).
Display of the * can be inhibited using the Indicate mandatory selector check failures setting.
p14
Classifier Administration Server Guide UM644001
Note: Visio does not support Custom Properties, and the Classifier Label value is held using a different
mechanism.
Note: Saving a document as another type (e.g. Word --> TXT or EXCEL --> CSV prompts to indicate
that information w ill be lost. The Classifier label information is one of the casualties of such operations.
Note: Saving as PDF: You can populate various standard document properties ( Title, Author,
Subject and Keywords) that will be propagated if you save an Office document as PDF. However,
Office applications do NOT propagate any custom properties to the PDF. In particular the
bjDocumentSecurityLabel is NOT propagated. Email, OW A and Notes Classifier will check defined
label locations for recognisable labels in standard PDF file properties for the Check for the high-water
mark and Add an attachment list rules.
The properties can be viewed using standard Office application actions. These vary across the
applications, and Office versions:
Click the Office button then choose Prepare and Properties. A task pane w ill display.
On the task pane, click Document Properties then Advanced Properties. A dialog will
display with a number of tabs.
Select the Custom Tab.
For Project 2010 or 2013:
Select File / Info and then choose Project Information / Advanced Properties .
Select the Custom Tab.
For other Office 2013 applications along w ith Office 2016, 2019 and 365:
Select File / Info and then choose Properties.
p15
Classifier Administration Server Guide UM644001
Document Properties
The private document properties maintained by Classifier are listed below . These properties should not
be modified by users or administrators:
Property Name Description
bjDocumentSecurityLabel The combined markings. Format is controlled by the Custom format
for 'Label Summary' custom document property
bjDocumentLabelXML XML format of the document Label.
bjDocumentLabelXML-0 Internal XML identifier
docIndexRef Unique document identifier.
bjFooterBothDocProperty Only if a Footer rule has been applied
bjHeaderBothDocProperty Only if a Header rule has been applied
Note: This topic is only applicable to Email, OW A, Mail Add-in, Notes and Mobile Classifier.
When a message is saved or sent, any label value selected is stored in a custom property. Any markings
defined by applicable rules are stored in the relevant locations. The values stored may be readily visible
if they are in a visible location (e.g. Subject), but others are not readily visible (e.g. x-headers).
The private properties maintained by the various Classifier mail applications should not be modified by
users or administrators, but are documented here for information purposes:
Property Name Description
(x-)bjprotectivemarking The Classifier encoded (SISL) label.
docIndexRef Unique document identifier (used for audit trail purposes).
p16
Classifier Administration Server Guide UM644001
Use of Templates
Note: This feature is not supported by OWA Classifier, Mail Add-in, Mobile or Notes Classifier
The Office applications allow you to create template files that can be used as the basis for new
documents.
You can set Classifier label values on these templates. When you subsequently create a new file using a
labelled template, Classifier uses the template label as the initial label value, rather than using any
default label setting.
If the template has no Classifier label value set then the configured default label value (if any) will be
used.
User Message Library - Messages displayed to users if Rules trigger. The product provides default
text.
Marking Library - Markings that are applied to items (Messages, Documents etc.).
User Interface Library - Text presented through standard dialogs. The product provides default text.
Configuration of the names of Selectors, Selector Values and Alternative names using Selector
Library and Policy Label UI features.
p17
Classifier Administration Server Guide UM644001
Mandatory Label value missing when sending a message). In such situations, Classifier applications will
present the selector choices in a Label Selection dialog.
If Masking of Selectors against Clearance is Enabled, then the list of values presented for each Selector
w ill be restricted by the user's clearance.
These basic label selection mechanisms may be extended by use of Portion Mark, Favourites,
Recently Used Labels and Portion Marks , Single Click operation, Assisted Labelling operation
and the definition of Tabs in a Policy.
Display selector values as buttons may be Enabled for single selection list selectors within the
policy (Single selection list options ). This will affect the presentation of the Ribbon, the Label Selection
dialog, Assisted Labelling operation and Tabs as described under those topics.
Ribbon Examples
Label Selection dialog
Portion Mark
Favourites
Recently Used Labels and Portion Marks
Single Click operation
Assisted Labelling Operation
Tabs (defined via a Policy)
Mobile Classifier user interface
Ribbon Examples
p18
Classifier Administration Server Guide UM644001
The dialog above show s the first (Single selection list) selector with Show value as set to Colour and
text and Display selector values as buttons option Enabled (Single selection list options ), the
second (Single selection list) selector has the option Disabled and that selector appears as a drop down
selection list. Note that items are displayed in columns and that the width of the 'column' is governed by
the widest element.
The selector captions (Classification and Department) appear in the ribbon. You can use the policy
property Show selector captions on the ribbon to change this effect.
The Favourites button in the examples above will only appear if Display of Favourites button is
Enabled (see Favourites for further details).
The Portion Mark button show n in the examples above will only appear if the option is Enabled for the
current application (see Portion Mark for further details).
Note: Favourites are not supported under OWA Classifier or the Mail Add-in.
Note: Portion Mark is not supported under OW A Classifier, Mail Add-in or Notes Classifier.
Ribbon handling
The Office ribbon places a limit on the number of items that can be placed inside a group on the ribbon.
If a single/multi selector contains many values and is configured to be show n as buttons (or checkboxes
in the case of multi-select selectors) then Classifier may not display the items on the ribbon, instead
the selector w ill need to be set via the label dialog. The limits are:
If the policy contains at least one selector to be displayed as a button on the ribbon and no selectors
that are to be displayed as checkboxes on the ribbon, then Classifier can display up to 150 items in
the ribbon for the selector(s).
If the policy contains at least one selector that is to be displayed as checkboxes on the ribbon and
no selectors that are to be displayed as buttons on the ribbon, then Classifier can display up to 150
items in the ribbon for the selector(s).
If the policy contains at least one selector that is to be displayed as buttons on the ribbon and at
least one selector that is to be displayed as checkboxes on the ribbon, then w e allow up to 100
items to be displayed
In various situations the user will need to choose a label when the ribbon is unavailable. For example if
a check mandatory selectors rule detects that a mandatory selector has no value chosen.
In such situations, Classifier applications present the Classifier Label Selection dialog which will show
the selectors and values pertinent to the current user. This dialog is also used to choose values for
selectors that cannot be displayed in the ribbon. For example, more than three selectors or multiple
selection list selectors.
The dialog below shows the first (Single selection list) selector with Display selector values as
buttons option Enabled. The second (Single selection list) selector has the option Disabled and that
selector appears as a drop down selection list. Refer to Single selection list options for more
information.
p19
Classifier Administration Server Guide UM644001
OWA
In an OWA environment, label selection and the standard label actions appear on an extended message
compose form.
Mail Add-in
In a Mail add-In environment, label selection and the standard label actions appear on an extended
message compose form.
p20
Classifier Administration Server Guide UM644001
The Classifier label interface is invoked using the Classifier button found in the bottom right hand
corner of the New Message dialog. The example below does NOT have single click enabled.
Notes
In a Notes environment, the current label setting is displayed, but the label value is set via the
configured Classifier label dialog if the Classify button is clicked.
p21
Classifier Administration Server Guide UM644001
Favourites
Note: This feature is not supported by OWA Classifier. Classifier Mail Add-in, Notes 8 and Mobile
Classifier.
Note: Availability of the Favourites button is controlled by the Display of Favourites button setting.
Users can use the Favourite Labels feature to remember their favourite label values (on that
w orkstation), and to choose the label value directly rather than choosing each selector value in turn.
The feature can be used alongside the Recently used Labels and Portion Marks features.
Access to the feature is via the Favourites drop dow n menu in the Classifier label ribbon bar with
availability controlled by Configuration Settings / General Settings / Display of Favourites button .
If the Recently Used feature is also enabled (Maximum number of labels to show > zero), then the
Favourites menu of actions w ill appear as:
Add current label to favourites - it will then appear as a sub item in the menu.
Organise Favourites - which shows icons allowing the user to manage the order in which the
Favourites appear, change the name presented for a Favourite, or delete entries from the list:
p22
Classifier Administration Server Guide UM644001
Organise Favourites.
The Rename action is inline which makes it easier to replace the text presented in the favourites
list.
Rename Favourite.
Set current label as default allows the user to set the current label as their own personal default
rather than using any policy defined default. This option is only available if User Selectable
Default Classification is Enabled in Properties (Policy).
Select a Favourite label from the sub-list (e.g. Public Sales) - the label value then appears in the
main label selection display.
Portion Mark
Note: This feature is not available under OWA Classifier, Classifier Mail Add-in, Notes Classifier nor
Mobile Classifier, and is not applicable to Visio and Project.
A Portion Mark is usually an abbreviated marking derived from a label value. For example, [P] for
Public.
Availability of the feature is controlled by application specific options as described in Portion Marking.
If the feature is enabled, then Portion Mark appears in the Classifier label ribbon.
p23
Classifier Administration Server Guide UM644001
Choose Portion Mark... which will present the dialog below, allowing the user to select a specific
label, or choose a favourite label, or a recent portion mark subject to their availability:
Note: This feature is not available under OWA Classifier nor Classifier Mail Add-in.
Note: The feature is unavailable unless Display of Favourites button is Enabled, as this is how
recently used labels are accessed.
Note: Recently used labels are displayed using the Custom format for Summary Markings .
These features are only enabled if Maximum number of labels to show is set greater than zero.
The Recently Used Portion Marks is only relevant if Portion Marking is Enabled in the application
(see Portion Marking).
Label values are only added to the list of 'Recently used labels' when a message is submitted or a
document is saved - selection of a label value does NOT update the list.
Recently used labels are available to the user under Favourites.
Recently used portion marks are available to the user under Portion Mark.
p24
Classifier Administration Server Guide UM644001
Note: This mode of operation is only available if the current policy has Use Single Click with pre-defined
labels configured.
The administrator can use the Use Single Click with pre-defined labels feature to configure up to tw elve
separate buttons, each with its own Label value, Caption, Tooltip and Colour or Image that replace
the standard drop downs in the Classifier Label Ribbon. Single Click can be used in conjunction with
Assisted Labelling.
Note: The actual appearance shown below will be modified according to whether other features such as
Favourites or Recently Used Labels and Portion Marks are in use.
Note: The matrix of single click buttons displayed is affected by a windows re-size operation, so short
captions are advisable.
The user is presented with the buttons configured, and selects the associated label by clicking the
appropriate button (Pub / Sales or Conf / Board in the Outlook example below, or Non-Business etc. in
the OWA example).
p25
Classifier Administration Server Guide UM644001
Note: In Outlook, the dialog box launcher can be replaced by a button by enabling the Display of
Label Dialog launch button setting.
If single click is in use; and the label selection dialog needs to be presented (e.g. mandatory selector
missing when replying to an unlabelled message; and there is no default value defined; and the user
clicks Change on the No label Policy Check dialog), then an intermediate dialog may be presented
allowing a Single Click button to be clicked, or the full label selection dialog (above) to be invoked by
clicking the 'Current Marking' button (No Marking in the example below ).
p26
Classifier Administration Server Guide UM644001
Office Classifier
Initially the Classifier label shows only the category selector with no default value.
p27
Classifier Administration Server Guide UM644001
p28
Classifier Administration Server Guide UM644001
p29
Classifier Administration Server Guide UM644001
p30
Classifier Administration Server Guide UM644001
It aims to reduce the need for the user to know details of what actual label to pick, and
instead presents a series of questions for them to describe the work that they are doing. For
example, it’s a personal email, it’s related to a proof of concept, research and development, a
purchase request for a new toaster, etc. By answering the questions posed a user is guided to
select the most appropriate label.
The Decision Tree is displayed in its own dialog on the client, invoked by the user selecting a
ribbon button or from within the Classifier Label Selection dialog. It is independent of the
other means of selecting a label. All methods – Single-Click, Label Dialog, Decision Tree – can
be configured to be available in a policy concurrently.
A Decision Tree is created by referencing Question and Answer items defined in a Question
Library.
To enable the Decision Tree, see Enable the Decision Tree Functionality.
Question – A question presented on the client dialog that offers a choice or requires some
input from the user, e.g. Is this a personal or business email?
Answer – The choices available in response to the question, e.g. It’s a personal email.
DT – Decision Tree.
QL – Question Library.
p31
Classifier Administration Server Guide UM644001
p32
Classifier Administration Server Guide UM644001
The data classification label questions follow the exam ple configuration of the Dec ision Tree in
the previous picture.
p33
Classifier Administration Server Guide UM644001
Question Library
The Question Library (QL) contains questions and pre-defined answers for eac h question. It
enables the reuse of questions between policies and groups potential answers together. This is
a new section within the admin tool and is located together with the other libraries outside of and
available to the policies. It w ill contain a collection of independent questions, each having a number of
associated answers.
Renaming of selectors and selector values w ill be applied to any in use in the Decision Tree.
Therefore renaming then sw itching back to the Decision Tree will show the new names in the
configured labels.
Changes of selectors in the policy (unless prevented by the ‘in use’ check) will be reflected in the
label dialog in the Decision Tree editor. That is, the currently available selectors and values,
together w ith colours and captions, will be shown w hen the Add Label dialog (or its corresponding
Properties instance) is next opened.
Question Library changes are monitored and updated where they are used in the Decision Tree
Editors (all policies).
p34
Classifier Administration Server Guide UM644001
Note: The Decision Tree in the client feature will not be available for Sent Item email
messages.
The following images show examples of how the Decision Tree Dialog may appear in the
Client.
p35
Classifier Administration Server Guide UM644001
Note: Check that the Decision Tree has been enabled in the Classifier Administration User
Interface. This is found under Labelling Configuration>Policies
(Policy)>Properties>Use Decision Tree .
p36
Classifier Administration Server Guide UM644001
1. In the Message menu, select the Use Guidance icon. A Classification Guidance window
w ill appear.
2. The description w ill ask, What kind of message is it? Select an option in the list. Once the option
is selected a label will appear.
3. Click on the OK button. T he resulting label will be applied to the em ail. Other options are:
Clear - The Clear button will reset the label back to its initial state, i.e. em pty.
Mobile Classifier is an email App that can be installed on a supported mobile device. The App will appear
as an entry in the App list either as an icon, or as an icon with associated text:
Mobile App
When view ing messages in a folder the classification value (if any) appears as follows:
p37
Classifier Administration Server Guide UM644001
Label Options
Email, Office and OWA Classifier present the standard label options menu. The actions supported are:
Clear (for Notes Classifier this only appears on the label selection dialog.
Default (for Notes Classifier this only appears on the label selection dialog.)
Link to site defined help (for Notes Classifier this only appears on the label selection dialog)
Show Summary Marking (only appears if relevant)
About Classifier (not available under Notes Classifier)
p38
Classifier Administration Server Guide UM644001
Note: For Notes Classifier this only appears on the label selection dialog. Not available under Mobile
Classifier.
This action clears the current values for each selector.
You can control whether this option appears using the Show labeller 'Clear' button setting.
Default
Note: For Notes Classifier this only appears on the label selection dialog. Not applicable under Mobile
Classifier.
This action restores the label value to the default label values defined by the policy.
You can control whether this option appears using the Show labeller 'Default' button setting.
Note: Not supported by Mail Add-in or Mobile Classifier. Only appears on the Label selection dialog for
Notes Classifier.
This action will open the link configured in URL for your labelling help site .
This action will be unavailable (greyed) if the setting is not configured.
Note: Whilst OWA Classifier supports the Help links defined in a Classifier Configuration, the nature of
OWA access may mean that a defined link is not accessible due to external access controls (e.g.
additional authentication requirements). Classifier Mail Add-in does not support this feature.
Note: This is only applicable to Office Classifier. OW A Classifier and Mail Add-in Classifier do not allow
the user to close the Summary Marking area.
This action allows the user to re-instate the Summary Marking area. The action w ill only appear if the
following are all true:
Show Summary Marking in task pane is Enabled (Disabled means the summary marking area never
appears).
Force Summary Marking in task pane is Disabled (Enabled means the summary marking area
cannot be closed).
p39
Classifier Administration Server Guide UM644001
The user has closed the summary marking area that normally appears at the bottom of the
application window, AND the current environment does not provide another means of restoring the
summary marking area (e.g. Outlook provides an expand option after closure).
About Classifier
Note: Not available under Notes Classifier, Classifier Mail Add-in, nor Mobile Classifier.
Selecting About Classifier shows information about the installed Email or Office Classifier product
including the licence state for that client, and configuration location etc.
About Classifier
A Label selected message(s) button when viewing a folder summary in Outlook (not available
under OWA)
p40
Classifier Administration Server Guide UM644001
p41
Classifier Administration Server Guide UM644001
p42
Classifier Administration Server Guide UM644001
CLASSIFIER ADMINISTRATION
Selecting the root node of Classifier Administration presents the initial display.
The Administrator Management Menu provides access to features relating to the control of
Administrator activities.
To establish a Classifier configuration for the first time, choose Labelling Configurations .
To administer an existing local configuration, expand the Labelling Configurations node and
proceed.
To retrieve an existing master configuration to your local File Store, choose Get Server
Configuration.
To publish a test configuration choose Publish Test Configuration . This test configuration can then be
accessed using the Test Mode Administration application.
To generate configuration information suitable for retrieval from a URL (Classifier Management
Agent), choose Create Web Configuration .
p43
Classifier Administration Server Guide UM644001
This menu is available at the top right of the Classifier Administration w indow. It provides access
to the following features:
Admin : Classifier Administration -> Administrator Management Menu -> Configuration Folder
Paths
This dialog lets an administrator define the folder locations pertinent to Get Configuration, Publish
Configuration, Create Web Configuration and Test Mode.
p44
Classifier Administration Server Guide UM644001
Admin : Classifier Administration -> Administrator Management Menu -> System Roles
Management
This allows a Full Administrator to assign various Classifier configuration administration capabilities to
individual users or groups.
Initially, at installation, the installer and the user under which the service runs (specified during
installation) are assigned as Full Administrators.
Note: All other users w ho might logon to the Classifier Administration Service will see the basic
Classifier Administration interface, but w ill have no access to any underlying information.
System Role
Note: The current administrator cannot delete themselves from the Full Administrator set.
Note: Only a user in the Full Administrator role can modify the roles and configuration.
p45
Classifier Administration Server Guide UM644001
The system role capabilities of each category are described in the following table.
Role Description
Full Auditor Read access to all elements of the configuration (e.g. to produce reports).
Publisher Permission to publish the configuration. This role also includes the permissions that
the General Administrator role has.
Policy Read and write access to configuration for all policies. Can lock / unlock the
Administrator publication of the configuration.
Includes Policy Auditor role and General Auditor capabilities .
Can Publish Test Configuration.
Further delineation between users capabilities regarding policies is possible by
configuring Custom Roles for Policies allowing you (for example) to assign specific
policy capabilities to specific users/groups.
Policy Auditor Read access for all policies and policy settings. Includes the General Auditor role.
General Read and w rite access to configuration libraries and settings, but NOT to policies.
Administrator Can lock / unlock publication of the configuration.
General Auditor Read access to configuration libraries and settings, but not to policies.
p46
Classifier Administration Server Guide UM644001
Note: The operations for w orking with roles can only be performed by full Administrator users.
Role Menu.
To add a user(s) and/or group(s) to a role:
1. Go to the Classifier Administrator User Interface and click on the right hand Administration
Management menu with 3 lines and select System Roles Management. The System
Roles Management w indow will appear. The user roles are defined in System Roles Management.
2. To add a user or group to the System Role, click on the highlighted Edit link. An Edit Role window
w ill appear.
3. Enter the name of the user(s) and/or group(s) and click on the Find button.
p47
Classifier Administration Server Guide UM644001
4. Select an the appropriate user(s) and/or group(s) and then click on the Add User/Group button.
p48
Classifier Administration Server Guide UM644001
5. Add more user(s)/group(s) as required. click OK. The custom role has been added to the parent
dialog. In the System Roles Management window the user and groups that were added will
appear in the Users/Groups Assigned to... column under the System Role that was initially
selected.
p49
Classifier Administration Server Guide UM644001
Role Menu.
To edit a system role:
1. Go to the Classifier Administrator User Interface and click on the right hand Administration
Management menu with 3 lines and select System Roles Management. The System Roles
Management window will appear.
2. To edit the System Role click on the highlighted Edit link. An Edit Role window will appear.
3. Enter the name of the user/group and click on the Find button.
p50
Classifier Administration Server Guide UM644001
4. Select an the appropriate user or group item(s) and then click on the Add User/Group button.
p51
Classifier Administration Server Guide UM644001
5. Add more users/groups as required. click OK. The custom role has been added to the parent dialog.
In the System Roles Management window the user and groups that were added will appear in
the Users/Groups Assigned to... column under the System Role that was initially selected.
p52
Classifier Administration Server Guide UM644001
Deleting a user.
To delete a user or group from system role:
1. Go to the Classifier Administrator User Interface and click on the right hand Administration
Management menu with 3 lines and select System Roles Management. The System Roles
Management window will appear.
2. Click on the highlighted Edit link. An Edit Role window will appear.
3. To delete the user or group click on the Delete link next to the user or group. The user or group will
be deleted.
4. To save, click on the OK button otherwise click on the Cancel button.
Admin : Classifier Administration -> Administrator Management Menu -> Custom Roles for
Policies
If no Custom Roles are established for a policy, then that policy may be administered by any user that
has Policy Administrator / Auditor capability.
p53
Classifier Administration Server Guide UM644001
If one or more Custom Policy Roles are defined for a policy, then that policy may only be
Administered / Audited by users defined by the assigned Custom Policy Roles.
A user may be designated as having a Policy Auditor system role (but not Policy Administrator), but
be assigned read/write capability through the Custom Policy Roles mechanism - the latter w ill take
precedence for policies that have the relevant Custom Policy Role assigned.
p54
Classifier Administration Server Guide UM644001
Role Menu.
To create a Custom Role for Policies:
Management menu with 3 lines select Custom Roles for Policies. The Custom Roles for
Policies window will appear.
p55
Classifier Administration Server Guide UM644001
Policy Permissions.
p56
Classifier Administration Server Guide UM644001
10. Choose the required permissions and click OK then Ok again. The main dialog is updated to display
the changes:
Invoke User Roles and Permissions from the Administration Management menu ,
this will present the follow ing:
p57
Classifier Administration Server Guide UM644001
p58
Classifier Administration Server Guide UM644001
p59
Classifier Administration Server Guide UM644001
Publish Configuration
Admin : Classifier Administration -> Publish Configuration
Note: If the action is unavailable, it may be because a policy is locked.
Once your configuration is stable you need to publish it to make it available to the wider community
using either Active Directory or the file system. For an overview of these mechanisms see Configuration
Deployment.
Every time you publish a configuration, an archive copy is stored locally as described in Configuration
Archives.
Note: The configuration space requirements are outlined in Configuration size estimation .
Note: If you wish to publish the Classifier configuration via Active Directory then the Active Directory
Schema must be updated ( Extending the Active Directory Schema ). Schema update is not required if
you intend to publish the configuration via file store.
Publishing a configuration replaces any version previously stored in that location and is accomplished as
follows:
Select the Classifier Administration node and choose Publish Configuration which will
display the follow ing:
p60
Classifier Administration Server Guide UM644001
Publish Configuration
Select the Active Directory or File Store option as required.
If you choose File Store, the configuration is retrieved from the follow ing registry setting:
HKEY_LOCAL_MACHINE\SOFTW ARE\Boldon James\Boldon James Classifier Management
WCF Service\ConfigPublishFolder.
By default this points to c:ProgramData\Boldon James\Config Publish Folder .
The OK button is disabled until you enter a Publish Reason. The text entered w ill appear in
the event log entry that records the publication.
If a policy has been configured in either of the following ways:
To use the Use Single Click with pre-defined labels feature, but no buttons are
configured
p61
Classifier Administration Server Guide UM644001
Publish reminder
Note: Each time you publish a configuration, an archive copy is stored locally. See Configuration
Archives for full details.
Click OK on the confirmation dialog.
Note: Publishing to Active Directory requires particular permissions that may not be available by default
to Domain Administrators on systems other than the Domain Controller. See Permissions for Publish to
AD for details of the permissions required.
Note: If you publish the configuration to file store you must ensure that the target (master) location
has suitable permissions. End users should have the ability to read from that location and administrators
that are to modify the master configuration must also have the ability to write to that location using the
network path.
Note: Changes made to the Classifier configuration must be published to ensure that Classifier
environments access the updated information.
Note: OWA Classifier only changes its configuration after a restart. Thus after publishing an updated
configuration, an IISRESET w ould be required to cause OWA Classifier to use that new configuration.
Note: SharePoint Classifier only picks up changes to the configuration after a restart or recycle of the
w ebsite w here SharePoint Classifier WCF service is installed. This is done through Internet Information
Services or on the command line through the Microsoft provided tool.
Note: Email and Office Classifier only pick up updated configuration on application restart. It is
advisable to restart all applications (Outlook, W ord, Excel etc.) to avoid applications using different
versions of the configuration.
Note: Users of File Classifier must Logoff/logon to pick up changes to the published configuration. This
is because explorer.exe stays running in the background (using the Classifier configuration available at
the start) even if the user closes the Explorer window.
Configuration Archives
Every time you publish a configuration, an archive copy is stored locally (on the Server system).
Note: The files in a configuration should NOT be edited manually - the configuration is signed, and
almost any change invalidates the configuration.
Archives are stored in a separate folder structure (C:\ProgramData\Boldon James
\CustomConfigurationArchives).
Each time you publish a configuration, a copy of the configuration being published is stored in a new
folder below CustomConfigurationArchives. The folder names start at zero and are incremented by one
each time.
The example below shows an archive structure of four archives (0 to 2):
p62
Classifier Administration Server Guide UM644001
Publishing the configuration to Active Directory requires the ability to delete (and re-create) relevant
objects below the cn=Boldon James node. These permissions are not assigned by default to Domain
Administrators. The following sequence shows you how to check / assign the relevant permissions:
Logon as a user that has Enterprise Administrator capabilities.
Run ADSIedit.
Choose Connect to ... and select Configuration from Select a well-known Naming
Context.
p63
Classifier Administration Server Guide UM644001
Connect to Configuration
Expand the Configuration and select the CN=Services/CN=Boldon James node
p64
Classifier Administration Server Guide UM644001
p65
Classifier Administration Server Guide UM644001
You can get Active Directory to report attempts by a non-privileged user to publish a Classifier
configuration to AD.
For 2008 using the Group Policy Management Editor MMC snap-in:
Edit the Default Domain Policy and navigate to Computer Configuration > Policies >
Windows Settings > Security Settings > Local Policies > Audit Policy
p66
Classifier Administration Server Guide UM644001
Audit Policy
Select Audit directory service access and edit the properties - enabling both Success
and Failure:
p67
Classifier Administration Server Guide UM644001
Auditing tab
Select the Auditing tab and click Add. Add Everyone and click OK.
p68
Classifier Administration Server Guide UM644001
Add everyone
In the Auditing Entry for Boldon James presented for Everyone, enable Success and
Failure for each of the following:
Delete
Delete Subtree
Modify permissions
Modify Owner
All validated writes
Create all child objects
Delete all child objects
Create account objects
Delete account objects
The Classifier configuration comprises a set of folders and files that are published.
Publication to file store is a copy process and the size is easily determined (e.g. the structure below C:\|
Users\<username>\Appdata\Roaming\Boldon James\Configuration - note these folders may be hidden):
p69
Classifier Administration Server Guide UM644001
Publication to Active Directory maps each folder and file to an individual object in Active Directory, and
requires base-64 encoding for image files. This encapsulation process incurs an overhead. The impact
on the Active Directory (the NTDS.dit file typically found in the Window s\ntds folder) can be estimated
using the following:
Overhead estimate per object in AD (1.1 Kb per The number of folders plus the number files in the
item). configuration * 1.1.
Overheads for base-64 encoding of image files. The size of all image files *.33.
A typical Classifier configuration contains about 15 folders and 16 files; plus 1 folder and 7 files per
policy; plus however many image files are added. With no image files and a single policy the
configuration w ithin Active Directory would typically be less than 300 Kb.
3. The path to the test folder can be set using Administrator Settings menu -> Configuration Folder
Paths.
4. Select Classifier Administration then choose Publish Test Configuration and provide a name
for the sub-folder that w ill hold the test configuration, and a reason for the publication.
p70
Classifier Administration Server Guide UM644001
p71
Classifier Administration Server Guide UM644001
Available Policies
This test sequence w ill temporarily set specific registry settings that direct Classifier applications to
use the chosen test configuration and policy, rather than any deployed configuration.
3. Start the application(s) to be tested. A dialog shows the currently active (Classifier) applications
Running Applications
4. End Test Mode is only enabled if there are no Classifier application running.
p72
Classifier Administration Server Guide UM644001
Close Applications
5. When a Classifier application starts running it indicates that it is operating in Test Mode.
p73
Classifier Administration Server Guide UM644001
Encrypted Password
The value shown is required to populate the WebConfigKey (Service Mode Web Config
Key) registry entry (see Web Host Settings) that allows Classifier Management Agent to
decrypt the configuration from the configured URL. Click Copy to clipboard, and then
Close.
Note: It is a matter for site policy as to whether the same password is used to encrypt
subsequent iterations, but if the plain text password value changes, the WebConfigKey
registry entry must be updated accordingly.
The encrypted string generated above may change each time EVEN IF THE PLAIN TEXT
PASSWORD VALUE IS UNCHANGED. There is NO need to update the WebConfigKey registry
entry just because the encrypted string has changed.
Check that the target (Zipped Configuration) folder contains both zip and version.txt files.
p74
Classifier Administration Server Guide UM644001
p75
Classifier Administration Server Guide UM644001
Global Settings
Image Library
User Message Library
User Interface Library
Global Settings
Admin : Global Settings
Global Settings apply to all users in the site that have Office Classifier functionality installed. For
example you can disable each Office application whilst leaving the software installed. The settings
available are
Application Settings
Audit Settings
Languages (only visible if Allow multiple languages is enabled in Properties (Classifier
Administration) / View)
Licence
p76
Classifier Administration Server Guide UM644001
Global Settings
The individual settings are available through Properties.
Application Settings
Application Settings
The settings supported are summarised in the table below. Changes will only take effect after policy
changes have been deployed and affected applications have been restarted
Setting Link to description
AutoDesk CAD (These options only appears if the relevant component
licence has been applied).
Dassault DraftSight
Allows you to Enable / Disable CAD Classifier operation
for the specific application post installation.
p77
Classifier Administration Server Guide UM644001
Clearance check Email domains Enabled - The Email Domain Clearance features of
Classifier Administration are available. Email Domain
Clearance is supported by Email, OWA and Notes
Classifier. See Email domain clearances for details of this
functionality.
Disabled - The Email Domain Clearance features are NOT
available. within Classifier Administration
Clearance Library Enabled - The Clearance Library features of Classifier
Administration are available. Clearance Library entries are
used by SharePoint Classifier. See Clearance Library for
further details.
Disabled - The Clearance Library features are NOT
available w ithin Classifier Administration
Dynamic Clearances Enabled - The Dynamic Clearance features of Classifier
Administration are available. See Dynamic Clearances for
details of this functionality.
Disabled - The Dynamic Clearance features are NOT
available w ithin Classifier Administration.
Note: For new Classifier configurations this settings will be
Enabled by default. For existing configurations the setting
is Disabled by default.
Maximum file size for icon overlay (in Defines the maximum size file (in KB) that File Classifier
KB) w ill attempt to generate an icon overlay for. If no value is
set the file size is unlimited.
Type: integer (stored as string in config)
Default Value: Not set, which means no restriction to
supported file size
Microsoft Excel Enable / Disable for each individual application.
Microsoft Excel for Mac The Classifier functionality for an application can be
activated using this setting (Enable / Disable ). Any
Microsoft Outlook
Classifier configuration associated w ith application is
Microsoft Outlook for Mac retained unchanged even if the setting id disabled.
Microsoft Pow erPoint The Mac options only appear if a suitable Classifier for Mac
Microsoft Pow erPoint for Mac licence has been applied.
Note: There is no Enable/Disable setting for Outlook Web Access (OWA Classifier) or (Lotus)
Notes Classifier as these are Enabled / Disabled by server based Installation / Removal in conjunction
w ith a component licence.
Audit Settings
p78
Classifier Administration Server Guide UM644001
p79
Classifier Administration Server Guide UM644001
Classifier Checks.
Classifier Checks Audit Settings Table
p80
Classifier Administration Server Guide UM644001
Setting Description
Attachment Check Audit the outcome of checking the labels of attachments
against that of the containing message.
Enabling this option audits if a rule applying this check
succeeds or fails – e.g. An attachment is found with a
label not dominated by the message label.
Author label change check Audit the outcome of performing an author label change
check. Enabling this option audits if a Check for Author
label change rule succeeds or fails – i.e. The 'Author' tries
to change the value of a label element w hen this is
inhibited by such a rule for Office applications.
Content check Audit when the user uses content checking. Enabling this
option audits if a Content Checking rule is actioned. That
is when a message Subject, Body or Attachment contains
a 'checked for phrase'. The audit entry w ill contain the
groups checked, the element (Subject / Body /
Attachment) that contained a 'checked for phrase'.
Default label check Audit when the default label check is triggered. Enabling
this option audits every time the configured Default Label
Check rule is actioned.
Disable reply to all check Audit the outcome of performing a message disable reply
to all check. Enabling this option audits every time the
Disable reply to all rule is actioned.
Label change check Audit the outcome of performing a label change check.
Enabling this option audits if a Check for label change rule
applying this check succeeds or fails – i.e. The user tries
to change the value of a label element but the action is
inhibited by the rules for application (Office, Email, OWA,
Notes or Mobile Classifier (Warn or Prevent).
Label expiry check Audit the outcome of performing a label expiry check.
Enabling this option audits if a Check these selectors for
expiry rule succeeds or fails.
Label validation check Audit the outcome of validating the complateness of a
label. Enabling this option audits if a rule applying this
check succeeds or fails.
Maximum message subject length Audit the outcome of performing a minimum message
check subject length check. Enabling this option audits if the
Check subject length does not exceed rule is actioned.
Message size check Audit the outcome of performing a message size check.
Enabling this option audits if the Check message size does
not exceed rule is actioned.
Minimum message subject length Audit the outcome of performing a minimum message
check subject length check. Enabling this option audits if the
Check subject length exceeds rule is actioned.
Number of recipients check Audit the outcome of performing a number of recipients
check. Enabling this option audits if the Check number of
recipients does not exceed rule is actioned.
Originator clearance check Audit the outcome of a clearance check on the message
originator. Enabling this option audits if a rule applying
this check fails – i.e. the Originator tries to send a
message but does not have the required clearance.
Recipient Clearance Check Audit the outcome of a clearance check on the message
recipients. Enabling this option audits if a rule applying
this check succeeds or fails – e.g. Originator tries to send
a message to recipients that do not have the required
clearance
Recipient list addition check Audit outcome of performing a recipient list addition
check. Enabling this option audits if a Check for additional
recipients rule is actioned. That is the user replies to or
forwards a message that triggers such a rule.
Recipient Type check Audit the outcome of performing a recipient type check.
Enabling this option audits if a Check recipient type rule is
actioned.
p81
Classifier Administration Server Guide UM644001
User warning check Audit when the user w arning check is triggered. Enabling
this option audits if a User Warning check rule is actioned.
Options.
Setting Description
Always Use SMTP addresses When auditing email addresses alw ays try to obtain an
SMTP address.
Note: This setting applies to Email Classifier, OW A
Classifier and Notes Classifier.
Enabled - Auditing will attempt to obtain an SMTP
address for the sender and all recipients. In some
situations this can lead to significant delays because no
SMTP address can be found.
Disabled - Classifier auditing w ill use the email address it
has available.
Test mode auditing Perform selected auditing operations even in the `test`
mode. mode. Enabling this option audits activities
performed whilst running in Test Mode. Disabling this
setting w ill stop events being logged w hen in Test Mode.
p82
Classifier Administration Server Guide UM644001
An example of event message content and a list of the different event messages can be found in
Auditing Event Messages.
Languages
The Languages to be supported are defined by selecting the Global Settings / Languages node.
Initially the list only includes the Configuration default language entry.
p83
Classifier Administration Server Guide UM644001
When a Language is added to the configuration it has no language specific values defined. You must
configure each required value - if an item does not have a language specific value defined, the
Algorithm (below) will be used to produce a value for display.
You can Add additional language entries, and Delete any language entry except for the
Configuration default language (you will be warned that all associated values will be lost). This
list of languages is presented wherever per Language values may be configured (see table below).
Selected languages can be of the form Language (Country) or Language (e.g. French
(Belgium) or French).
Thus you only have to define Language specific values if the algorithm described above would not
yield an appropriate value from one of the other Languages.
As an example you might have a French speaking community to serve, where most users can use
general French, but a few settings require community specific values (e.g. a Swiss variant of
French). You would then:
o Define French and French/Swiss as your supported languages;
o Configure the full range of values (actually only those essential for your environment) for
French;
o Set French as your policy default;
o Configure French/Sw iss variants only for those items that specifically require a different
value.
Features supporting Language mechanisms
Global Settings No facilities (not applicable).
User Message Library You can define per language Title, Text and Help URL link values for each
message through the Message Properties as described in Add a new message.
You can select which Language settings the User Message List presents.
p84
Classifier Administration Server Guide UM644001
User Interface Library You can define per language values for each of the configurable text items as
described in the sub-topics below User Interface Library / Properties (UI
Definition Items).
Selector Library Limited facilities are provided (see features excluded table below).
Per language values for the Caption and Tooltip can be defined for each
selector as described in Add a new selector. Equivalent policy settings are also
available.
Single selection list supports localisation (Languages) of selector Value Name,
Tooltip, Portion and Alternate Name /2/3.
You can select which Language related settings the Set Selector view presents.
You can also make use of the Alternate names which can be defined for
Single Selection Lists, Multiple Selection lists and Date offset Lists as
described under Selector Library / Selector Actions / Edit Selector.
Policies The Policy default language can be defined as described in Properties (Policy).
Per language values for the Caption and Tooltip can be defined for each
selector (Set Selectors) as described in Policies / Policy Label UI / Selector
Properties (Policy) / Selector Properties / General .
Policy / Single Click Per language values for the Caption and Tooltip can be defined for each
Single Click button as described in Use Single Click with pre-defined labels.
The following Classifier features are excluded from the Languages mechanisms (are not site
translatable):
Marking Formats Markings present business policy information (e.g. sensitivity) which must be
meaningful to all users. Supporting different markings for different locales
would be confusing to end users.
Sites can make their Markings multi-language (e.g. include both German and
English in a LLOT disclaimer).
(Not recommended) Sites may assign separate policies (applying different
Markings) to different groups (languages) of users.
"No Marking" text is For the same reasons as Marking Formats above. Sites can define 'composite'
not translatable text if required, e.g. "No Marking / Pas Marking / Nein Marking / ..".
Selector values are not Multiple selection list and Date offset list do NOT support localisation
translatable (Languages) of selector Value Name, Tooltip, Portion and Alternate Name /2/3.
Note: Selector Captions and Tooltips do support the Languages mechanisms.
User URL help page A single link can be defined. The site can provide language related
(available on
redirection at the web server using the browser supplied locale.
the Label selection
p85
Classifier Administration Server Guide UM644001
interface).
Licence
p86
Classifier Administration Server Guide UM644001
Selecting an entry in the list and clicking Details will show further information about the
licence.
Licence details
Note: If you have difficulty merging a new licence on to an existing system, it is likely that w hat you
are attempting is breaking the restrictions below (e.g. you have Evaluation licences and are attempting
to update only one of your products to a Full licence - you must update all installed products at the
same time (do not exit the licence dialog until all product licences have been updated),
Restrictions
There are certain limitations applied by the licence management software:
All licences must be at the same level (3 or 4). For example you cannot use an (historic) Email
Classifier Standard Edition licence (Level 3) and an Enterprise Edition (Level 4) Office Classifier
licence. Therefore, to add the Enterprise Edition Level 4 licence for the Office Classifier to a
configuration that contains Email and Office Classifier, you need to obtain and apply an Enterprise
Edition (Level 4) licence for Email Classifier at the same time.
You can update Evaluation licences to a Full licences, but not revert from a Full to an Evaluation
licence. You can have a configuration that includes a mixture of Full and Evaluation licences. If an
Evaluation licence expires, the features it licences are disabled/unavailable.
If you wish to stop using one licensed feature (e.g. OWA Classifier), and want to ensure that only
the relevant features are made unavailable in Classifier Administration, you may have to
reimplement your configuration using only the subset licences now required, or request assistance
from Classifier support.
Historic - You must use at least a Standard Edition (Level 3) licence if you have an existing
configuration created w ith Classifier Administration Console Version 1.0.
Licence Filenames
impBOX Box Classifier
impCAD CAD Classifier for AutoCAD
impCAD (DraftSight) CAD Classifier for DraftSight
impCEM Email Classifier
impCLN Notes Classifier
impCMB Mobile Classifier
impCOF Office Classifier
impCOW OWA Classifier and Classifier Mail Add-in
impBLK Pow er Classifier for Files
impCRP Classifier Reporting Console
impCRS Classifier Reporting Service
p87
Classifier Administration Server Guide UM644001
Licence Codes
These are the licence codes associated w ith each licensed Classifier product. The licence file supplied will
be made up of this code prefixed w ith "imp", e.g. impCRS for the Classifier Reporting Service. This
applies up to and including version 1.3.1 and has been superceded by the Classifier Reporting Service
CRS licence for v1.4 onwards.
Note: This applies up to and including version 1.3.1 and has been superceded by the Classifier Reporting
Service CRS licence for v1.4 onwards.
This topic summarises various features indicating Classifier product support (Email, Office, OWA, Notes,
Mail Add-in and Mobile Classifier) and the release versions in which they were first supported.
Note: This document assumes that the Classifier Licence(s) are Enterprise Level. Some features may
not be available on systems using (historic) Standard level 3 licences. These are annotated as [NH] in
the table below.
In the table below , x.y (e.g. 3.5) indicates a feature that is new in that version of Classifier products.
Versions of Classifier products prior to that number do NOT support the feature (Classifier 1.3 (which
preceded 3.4) is assumed as the baseline). For products other than Email and Office Classifier, and
Classifier Administration you should also check the Application (e.g. OWA Classifier) Release Note for
Application specific limitations additional to those in the table below and in individual topics.
Note: A summary of functional differences for the various mail Classifier products (Email Classifier,
OWA Classifier, Notes Classifier, Mobile Classifier and Classifier Mail Add-in can be found in Email, OWA,
Mail Add-in, Notes and Mobile Differences ,
p88
Classifier Administration Server Guide UM644001
Enterprise Edition
Features
Level 4
Applications
General Features
3 selectors Y
Up to 3 Selectors in Label Ribbon / ribbon Y
p89
Classifier Administration Server Guide UM644001
Marking Formats
Other Features
Note: SharePoint Classifier, File Classifier and Power Classifier each have their own licence, and each
provides a single level of features.
Note: OWA Classifier and Notes Classifier each have their own licence. They support a subset of the
p90
Classifier Administration Server Guide UM644001
features supported by Email Classifier as summarised in Email, OWA, Mail Add-in, Notes and Mobile
Features.
p91
Classifier Administration Server Guide UM644001
The current Classifier Licence status can be inspected from Email and Office Classifier (e.g. Outlook,
Word etc.) applications by selecting About Classifier from the Options menu on the Classifier Label
interface. Not available under Classifier Mail Add-in or Mobile Classifier.
p92
Classifier Administration Server Guide UM644001
Image Library
Note: Classifier currently only supports images stored as .JPG, JPEG or .PNG files.
Note: Images stored in the configuration are limited to a maximum size of 5Mb, and if you add an
image greater than 500Kb a warning will be presented.
The Image Library allow s you to define site specific images to be presented to the end user in some
circumstances (Single Click configuration option, and specific W ord, PowerPoint rules). This section
describes how you establish these images and their usage.
The set of images is managed through the Image Library node in the Classifier Configuration. The full
set of images is available for the Administrator for selection in all Classifier Policies.
If you intend to configure a Rule that supports an image, you should ensure that a suitable image is
available before defining the rule, or define the image at the image selection point in the rule definition
sequence using the "New..." option.
The rules that support images are described under Rules supported / Add rules:
o Add this image into header w ith this text wrapping and this alignment (Word)
o Add this image into footer w ith this text wrapping and this alignment (Word)
o Add this image as a w atermark (Word/Outlook )
o Add this image to top of page w ith this text wrapping and this alignment (PowerPoint )
o Add this image to bottom of page w ith this text wrapping and this alignment (PowerPoint)
The optional ability to display an image for Single Click items is described in Use Single Click with
pre-defined labels.
The set of actions supported by the Image Library are:
Properties (Image) [Provides the ability to view and change selected Properties of the image,
including changing the associated image].
Delete (Image)
Selecting the Image Library node displays a list of the currently defined images. This list is initially
empty.
p93
Classifier Administration Server Guide UM644001
Image list
p94
Classifier Administration Server Guide UM644001
Properties (Image)
Delete (image)
p95
Classifier Administration Server Guide UM644001
Properties (Message) [Provides the ability to change any of the Properties of the message including
its name (i.e. Rename)].
Copy (Message)
Delete (Message)
Selecting the User Message Library node displays a list of the currently defined messages. This list
initially contains pre-defined messages which you can use as you wish (adapt, delete, etc.).
Check rules in the Policy configuration perform checks and allow you to select the message that is
displayed to the end user, or to define reasons presented to users if you use the Challenge Options
For example an Outlook rule to check recipient clearance refers to a 'this message' item:
“Check clearance for recipients. Warn user if check fails with this message.”
The rule template is presented with a value ( Warn - Unapproved recipients ) supplied as a placeholder
p96
Classifier Administration Server Guide UM644001
p97
Classifier Administration Server Guide UM644001
p98
Classifier Administration Server Guide UM644001
Language (Message)
Languages list
Selecting a language will update the message list to show the Message Text configured for each
message for that language.
Properties (Message)
Copy (Message)
Delete (Message)
p99
Classifier Administration Server Guide UM644001
p100
Classifier Administration Server Guide UM644001
Menus (UID)
Ribbon (UID)
Select the <Item> Properties action (the lower of the two instances in the action pane)
w hich will present the settings available for modification under that item. (See the topic for
the relevant action for details of the settings.)
Make any changes required and click OK.
p101
Classifier Administration Server Guide UM644001
UI Definitions list
The initial state of a UI definition is a straight copy of the Default UI definition.
You can view or change the settings associated with a UI definition as described in Properties (UI
Definition Items).
p102
Classifier Administration Server Guide UM644001
Select the User Interface Library and select the UI definition you wish to delete.
Click Delete.
Click OK on the delete confirmation dialog presented.
You will not be allowed to delete the UI Definition if it is in use in a policy:
Delete UI Definition
Menus (UID)
Ribbon (UID)
Select the <Item> / Properties action which will present the settings available (described
under the appropriate sub-topic) for modification under that item.
Make any changes required and click OK.
p103
Classifier Administration Server Guide UM644001
Challenge (UID)
The settings are contained in the dialog shown below. The default value appears to the left, you supply
the replacement text in the right-hand side.
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
Note: The rule specific text (A required label element... . above) is the same as appears on the
parent Policy check dialog.
p104
Classifier Administration Server Guide UM644001
Challenge Properties
p105
Classifier Administration Server Guide UM644001
p106
Classifier Administration Server Guide UM644001
This also includes a section that applies when viewing within Office ’s BackStage View.
Admin : User Interface Library / {UI definition} / Content Inspection Check Properties
Note: These items are only relevant to Email Classifier (Outlook) and Office Classifier.
This User Interface item allow s you to change the text presented to the user if a content check rule
detects content of interest, and the user then selects View.
Note: The text presented to the user in the initial Policy Check dialog is configured either via the User
Message Library, or through the User Interface Library / Policy Check item.
The default Content Matches dialog appears as follows:
Content Matches
The properties contained in the dialog shown below can be set. The default value appears to the left,
you supply the replacement text in the right-hand side.
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
p107
Classifier Administration Server Guide UM644001
p108
Classifier Administration Server Guide UM644001
The properties contained in the dialog shown below can be set. The default value appears to the left,
you supply the replacement text in the corresponding fields.
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
p109
Classifier Administration Server Guide UM644001
The properties contained in the dialog shown below can be set. The default value appears to the left,
you supply the replacement text in the right-hand side.
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
p110
Classifier Administration Server Guide UM644001
Admin : User Interface Library / {UI definition} / Folder View Labelling Properties
Note: This feature is only relevant to Email Classifier (Outlook).
This User Interface item allows you to change the text presented to the user through the Folder View
Labelling dialog that can appear in some circumstances as described in Folder View Labelling Operation
Note: The text presented to the user in the initial Policy Check dialog is configured either via the User
Message Library, or through the User Interface Library / Policy Check item.
The default Content Matches dialog appears as shown below.
p111
Classifier Administration Server Guide UM644001
p112
Classifier Administration Server Guide UM644001
p113
Classifier Administration Server Guide UM644001
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
The last few (Please Wait..., Updating workbook.... etc.) all relate to a progress dialog that appears
when saving Excel workbooks.
p114
Classifier Administration Server Guide UM644001
Do you want to save the changes you Only applicable to Microsoft Excel. Classifier has to
made to {0}? replace the standard application dialog to ensure
consistent operation.
Failed to calculate high w atermark - Check for the high-w ater mark
leaving document label at original value.
Failed to calculate high w atermark - Check for the high-w ater mark
leaving message label at original value.
It is not possible to dow ngrade the label. Check for label change
The item contains a label w ith a higher Portion Mark
value than the overall label.
Ensure attachment markings are consistent
This cell is not empty. A portion mark Portion Mark
cannot be inserted here.
Unable to insert the label into the An attempt to set the label on an item.
document since it is marked as protected.
Unable to insert a portion marking since Portion Mark
the document is protected.
Unable to insert the label into the An attempt to set the label on an item.
document since it is marked as read-only.
Unable to insert a portion marking since Portion Mark
the document is read-only.
Your labelling policy requires you to save Microsoft Project only.
this document before you send it.
Your labelling policy requires you to save Office 2003 obsolete
this document before you send it. Would
you like to save the document now ?
Your labelling policy requires you to save Office 2003 obsolete
this presentation before you send it. Would
you like to save the presentation now ?
Your labelling policy requires you to save Office 2003 obsolete
this workbook before you send it. Would
you like to save the w orkbook now ?
Failed to access attachment. Warn if file contents cannot be accessed
It is not possible to change the label at this An attempt to set the label on an item.
time as this item is protected.
Please Wait... Whenever a progress dialog is presented.
Updating w orkbook... Indicates Classifier is applying policy rules etc.
Updating w orkbook footers... No longer used
Updating w orkbook headers... No longer used
Completing update of w orkbook... Indicates Classifier is applying policy rules etc.
New Default Label applied successfully. You User Selectable Default Classification - Properties
must restart Office for your change to take (Policy) .
effect.
Classifier Attachment List General Email content
p115
Classifier Administration Server Guide UM644001
p116
Classifier Administration Server Guide UM644001
p117
Classifier Administration Server Guide UM644001
Menus (UID)
Multiple Languages
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
Menus Properties
This also includes a section that applies when viewing within Office ’s BackStage View.
Note: The settings for Clear and Default above relate to the text shown in the Ribbon. There are
similar settings (Clear and Default) found under Label Selection which relate to the text shown in the
Label selection dialog.
Menu Tooltips
Label Dialog - Create or change the label using the label dialog.
Add Current Label to Favourites - Add the current label to your favourites (Under Favourites).
p118
Classifier Administration Server Guide UM644001
Organise Favourites - Change the order your favourites appear in the Favourites menu (Under
Favourites).
Set current label as default - Set the current label as the user defined default label (Under
Favourites).
Clear User Defined Default - Clear the current user defined default label (Under Favourites).
Options - Display additional options for labels and other advanced features.
Clear - Clear the current label for this document. (Under Options)
Classification History - View the history of the label changes on this document (Word)
Show Summary Marking - Show the summary marking of the current label in the pane below the
document (Note: This only becomes active on the Option menu if the summary label is not
displayed).
Track Document - Azure RMS Document Tracking (Note: This only becomes active if enabled in
the CAS and the client is using RMS.
p119
Classifier Administration Server Guide UM644001
Organise Favourites.
The settings are contained in the dialog shown below. The default value appears to the left, you supply
the replacement text in the right-hand side.
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
p120
Classifier Administration Server Guide UM644001
Note: The Back button may be unavailable in some circumstances. See Process rules when printing
and Process rules when saving.
Note: The subordinate box titles (e.g. Unapproved recipients) are taken from the 'Title' of the user
message associated w ith the rule - not the Name of the massage (e.g. Name = Warn - Unapproved
recipients / Title = Unapproved recipients).
The settings are contained in the dialog shown below. The default value appears to the left, you supply
the replacement text in the right-hand side.
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
p121
Classifier Administration Server Guide UM644001
Ribbon (UID)
The settings are contained in the dialog shown below. The default value appears to the left, you
supply the replacement text in the right hand side.
p122
Classifier Administration Server Guide UM644001
This also includes a section that applies when viewing within Office ’s BackStage View.
Select Label - The text of the ribbon menu that displays the labeller dialog to create or edit a label.
Show Label - The text of the ribbon menu to show the label dialog in read-only mode.
Set Label - The text of the ribbon menu to change a label on an existing received message (only
applies if Folder View Labelling is enabled)
Label Dialog - The text of the ribbon menu that allows a user to add additional label elements that
are not available on the ribbon when in single click mode.
Other settings that appear in the primary label interface can be found under:
Menus (UID)
p123
Classifier Administration Server Guide UM644001
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
p124
Classifier Administration Server Guide UM644001
The settings are contained in the dialog shown below. The default value appears to the left, you supply
the replacement text in the right-hand side.
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the algorithm
defined in Languages would not yield a suitable value from another configured
Language.
Choose the Language and then define the relevant values.
p125
Classifier Administration Server Guide UM644001
p126
Classifier Administration Server Guide UM644001
LABELLING CONFIGURATIONS
Note: At this time only a single Labelling Configuration is supported.
Most Classifier settings are held in a Labelling Configuration (with the exception of the Settings
applicable across the organisation). The initial installation has no labelling configuration defined. A
Configuration is established by an administrator who can then Publish that configuration to a master
location. To make a change to the master configuration you should retrieve the master configuration,
operate on it locally and then publish the update. Care should be taken if more than one person is
making changes to the configuration, and further details of this process can be found in Configuration
Deployment.
The following actions are relevant:
Labelling Configurations
The Configuration (including the Global Settings and User Message Library) can be Published and
retrieved using:
Selector Library The set of Selectors and Selector values defined for this configuration
Marking Library The set of Marking Formats defined for this configuration
Content library The set of definitions to be used by Content Checking
Condition Library The set of Conditions that can be used w ith Add Rules and Apply Rules.
Configuration settings Settings that apply to all users of the Label Configuration.
Policies One or more Policies that tailor the features to meet the requirements for a
group of users.
Clearance Settings (Optional) Provides access to the settings that manage Domain (if enabled)
and Dynamic Clearance features.
p127
Classifier Administration Server Guide UM644001
p128
Classifier Administration Server Guide UM644001
If there is no licence currently applied (e.g. immediately after installation) when you invoke
Add a new Label Configuration you will need to add apply a licence file as follow s.
Click the Browse button which will present an Open dialog. Navigate to the location of the licence file to
be applied (e.g. below Base Bundle\Licence and open a suitable folder (e.g. Email Classifier).
Select the .LIC file presented (e.g. IMPCEM.LIC) and click Open. This will populate the Licence File field.
[These licence files are limited period evaluation licences).
Click OK.
You can apply additional licences as described under Licence.
You now have a complete configuration that can be explored or modified.
p129
Classifier Administration Server Guide UM644001
Selector Library
Admin : Labelling Configurations {configuration} Selector Library
Note: The names of Selectors and Selector values must be unique within the configuration to avoid
ambiguities when parsing text labels.
A Label (Classification) is made up of one or more Selector Values that together “classify” an object
(document / message) w ith that label having meaning within the organisation, defining qualities such as
its sensitivity / importance / operational handling. For example, a label may just contain non-disclosure
information.
Selecting the Selector Library node show s a list of the configured Selectors (initially empty if you are
using the Empty Configuration Template) and the Values defined for the currently selected Selector.
Each Selector defines one or more Values that may be selected by the end user (using the Label
Selection interface). The Selector Library defines the Selectors and Values supported by this Label
Configuration. However, the Selectors and Values actually available to end users are defined through a
Policy which allows Selectors and / or Values to be hidden from selected users according to the policy
that is assigned to them.
Control over w hich Selectors and values are presented to end users is actually controlled as part of
Policy definition. Selectors and Values must be specifically chosen for presentation in a policy.
You should define all Selectors that are meaningful in your Label Configuration. This may include
Selectors that are not included in all policies. This may arise for example because one of your Selectors
is only relevant to a specific set of users. This does not preclude those (limited) users from receiving
labels containing values from the ‘hidden’ selector.
All Selectors can be show n through the standard Marking Format mechanisms. The behaviour when a
user receives a document or email message containing a value relating to such a ‘hidden’ selector is
described in Retained (Retained Selectors being the term used to refer to Selectors NOT available for
selection in the current policy).
By default a Selector is not Mandatory – that is a Label may be valid if it has no Value selected for this
Selector. You can ensure that a user chooses a value for a Selector (it is Mandatory) by configuring
Check these mandatory selectors rules.
Selector values are relevant to any Check for the high-water mark rules (Email, OWA and Notes).
Selectors and their values are usually Active, but may be Active, Obsolete or Retained .
The actions supported are described in Selector Actions .
Once you have defined some selectors the display appears as follow s:
Selector Library
p130
Classifier Administration Server Guide UM644001
Selector Actions
Edit Selector
Move Up / Move Dow n
Obsolete / Restore Selector
Delete (Selector)
Single selection list Appears to the user as a drop down list from which they can choose zero
or one Value from the set of values allowed through the current policy.
Multiple selection list Appears to the user as a drop down list from which they can choose zero,
one or more Values from the set of values allowed through the current
policy.
Text entry Appears to the user as a (possibly constrained) text entry field.
Date picker Appears to the user as a (possibly constrained) date selection field.
Date offset list Appears to the user as a drop down list from which they can choose one
Value from the set of values configured in the current policy. The
associated configuration is used to produce an offset to the current date.
1. Select the Selector Library and choose Add a new selector and choose the required selector type
from the those presented:
p131
Classifier Administration Server Guide UM644001
Selector types
2. This will present a dialog showing the selector Properties. The example below shows a Single
selection list selector.
Text entry
Date picker
p132
Classifier Administration Server Guide UM644001
library.
You can change this order using the Move Up and Move Down actions.
Select Selector Library and select the Selector to be moved.
Choose Move Up / Move Down as required.
p133
Classifier Administration Server Guide UM644001
Language (Selectors)
Edit Selector
Text entry
Date picker
p134
Classifier Administration Server Guide UM644001
p135
Classifier Administration Server Guide UM644001
o You intend to configure rules to Check for Author label change or Check for label
change (Check rules).
o You intend to perform Label dominance checks and use Portion Marking ( Portion Marking). It
allows the software to ascertain whether one label ‘dominates’ another to ensure that the
email message label "dominates" all attachment labels for example (see also Label
Dominance).
o You intend to configure rules to Check for Author label change or Check for label
change (Check rules) under Email, OWA or Notes Classifier and this selector is to be
included in those checks (Application Settings / Clearance check Email Domains or
Clearance check Users must be Enabled).
Hierarchy This setting is only relevant if Include this selector in clearance and attachment
checks is set. [Hierarchy has no impact on Clearance checks, since all clearances are
specific]. Three choices are available via the drop down list:
o No Hierarchy This Selector does not operate as a Hierarchy. The Hierarchy column is
removed from the dialog above.
Note: Selecting No Hierarchy in conjunction with Include this selector in clearance
and attachment checks will cause the user to have to resolve issues such as High-w ater
mark checks detecting differences between message label and attachment label(s) that
might be resolved automatically if the selector was Hierarchic.
o Hierarchical based on the value order The Selector operates as a Hierarchy and the
order of appearance is the same as the display order (The value at the top of the list is
dominated by the second in the list in turn dominated by the third…). The hierarchy value is
automatically derived from the position (and is sequential - 1,2,3...).
o Hierarchical with manual configuration The Selector operates as a Hierarchy but you
must set the relative order manually (through the Edit Values dialog / Hierarchy column).
The value assigned a hierarchy value of 1 is dominated by the value assigned 2, which is
dominated by 3 etc. Choosing this value makes the relevant cells editable, and allows the
display order to be different to the hierarchy order.
Note: If you happen to define the hierarchy values sequentially starting at 1, then Classifier
w ill detect this and automatically sw itch the setting to Hierarchical based on the value order.
You can change this subsequently by assigning different values.
p136
Classifier Administration Server Guide UM644001
o You intend to configure rules to Check for Author label change or Check for label
change (Check rules).
o You intend to perform Label dominance checks and use Portion Marking ( Portion Marking). It
allows the software to ascertain whether one label ‘dominates’ another to ensure that the
email message label "dominates" all attachment labels for example (see also Label
Dominance).
o You intend to configure rules to Check for Author label change or Check for label
p137
Classifier Administration Server Guide UM644001
change (Check rules) under Email, OWA or Notes Classifier and this selector is to be
included in those checks (Application Settings / Clearance check Email Domains or
Clearance check Users must be Enabled).
Permissive/Restrictive - This radio button is only available if Include this selector in clearance
and attachment checks is set and only applicable if Clearance Checks are configured. The
setting indicates if a Domain or User must be Cleared for one of ( Permissive) or all of (
Restrictive) the selected values. See also Label Dominance for further details).
Text entry
p138
Classifier Administration Server Guide UM644001
circumstances will arise where this is not possible (e.g. Forward of a message containing
invalid value for this selector). You can Add a new message to create a New user message
by pressing Add.
Enter text to see how this freeform text selector will behave - Allows you to see how the
configured settings affect the user interaction.
Date picker
p139
Classifier Administration Server Guide UM644001
p140
Classifier Administration Server Guide UM644001
By direct edit of a cell in the Edit Selector window (text entry or drop dow n). Simply select the cell
and perform the change.
By selection from a drop dow n list from which you can choose the setting you require (e.g. a colour)
By use of the Buttons (Selector values) to perform an action on the selected Value (e.g. Move up /
Move down)
Multiple language support for selector values
Single selection list and Multiple selection list selectors optionally provide multiple language support
allowing you to configure language specific values for selector value Name, Tooltip, Portion and
Alternate name 1/2/3.
Selecting a configured language will show the values associated with that language. If there is no
language specific value defined for a property then the Algorithm for finding the text to display
defined in Languages is used to determine a value to be displayed and associated with the chosen
language.
p141
Classifier Administration Server Guide UM644001
Supported properties:
Name This is the string that by default is presented to the end user for selection of this Value via
the Label Selection interface; assuming the Selector and Value are available in the policy
applicable to the user.
You can choose to present the Portion or Alternate value rather than the Name in the
Label selection interface as described in Policy Label UI / Selector Properties / Options .
Colour This allows you to associate a colour (selected from the drop dow n colour dialog). Setting
the colour property for a Selector Value means that any marking which contains that Value
w ill automatically adopt the associated colour as the text colour. This is subject to the
proviso that the marking location must be capable of presenting colour (e.g. It would be Ok
in a Summary Marking presented in information bar, but not applicable to Meta data
locations). Marking formats may override the colour setting.
By default there is no colour setting.
Note: You can 'unset' an existing colour setting by: selecting the selector, choosing Edit
Values, clicking on the Colour cell to display the Colour Picker dialog. Then press CTRL + DEL
to revert to no colour setting.
Image (Only applicable to Single and Multiple selection list selectors and only relevant if
Use Single Click with pre-defined labels is enabled). You can associate an image from the
Image Library with the chosen selector value.
Tooltip This is an optional text value (maximum length 1000 characters including CR/LF etc.) that
w ill appear if a user hovers over the Selector value in the label selection dialog. If no value
is chosen, or there is no Tooltip defined for the selected value, then the Tooltip defined for
the parent Selector will be shown.
Note: Due to the nature of the environment, certain unusual characters within a tooltip
(e.g. ) may appear as a box ( ) when displayed via OWA. It is prudent to
check that any tooltip defined appears as intended in all relevant environments.
Note: There is no support for different language variants of Selector value tooltips.
p142
Classifier Administration Server Guide UM644001
Alternate name / Alternate 2 / Alternate 3 These values may be defined if you wish to
establish different Marking Formats to encode the current label value in different ways.
For example you may w ish to establish a Marking Format which presents the selected values
in full and perhaps use that format in Headers and Footers; but for Subject Prefix in email
messages you may require shortened forms (e.g. Public - > Pub). Up to three “alternate
names” for a value can be defined using these properties. When you configure a Marking
Format you can use either the Value Name, or any configured Alternative name.
You can choose to present the Portion or Alternate value rather than the Name in the
Label selection interface as described in Policy Label UI / Selector Properties / Options .
p143
Classifier Administration Server Guide UM644001
p144
Classifier Administration Server Guide UM644001
Selectors and Selector Values can be referred to as Active / Obsolete or Retained as described below. In
the simplest mode of operation selector values available in the current policy (via Policy / Set Selectors
display) are available to the user when setting the label value.
Active
Selector values 'added' into a policy are deemed Active. They are available for the user to choose as a
label value. Active values in an existing label are used as the initial value for a new object (e.g. forward
an email).
Obsolete
Over time you may find that some Selector values fall into disuse and should no longer be applied to
new objects. Classifier accommodates this circumstance by allowing you to designate Selector values
and/or Selectors (all values) as Obsolete.
Designating a Selector or Selector Value as obsolete means that it can still be recognised and presented
w hen it is found in an existing object (e.g. in the summary label for a document labelled w ith an
Obsolete value); but the user is not allowed to select that Selector/value when creating a new object.
So for example, if you forward or reply to an existing email that contains an obsolete Selector Value, the
obsolete value is dropped from the new email message, and replaced by the default value (if any) for
that selector. So obsolete selectors/selector values do not contribute to label dow ngrade checks.
Note: Saving a document containing an Obsolete selector value is treated as a new document, and any
Obsolete selector values are replaced by default values.
Obsolete Selectors take no part in Rules because Rules only apply to new objects (which by definition
cannot include Obsolete values). Whilst there is at least one Selector value active in a policy the
Selector can contribute to Rules.
You cannot obsolete a Selector until all Rules referencing the Selector have been deleted or modified to
avoid any reference to that Selector.
Note: If you have a Selector that is not Active or Retained in the current Policy AND is not marked as
Obsolete in the Selector Library it operates as though it w as actually marked as Obsolete - i.e.
presented if found, but not propagated.
Retained
You may have Selectors that are only available for selection by some users. Other users may only be
able to receive email messages containing those Selector values, but you want such users to be able to
forward an email containing the 'restricted' selector value - i.e. to retain the label value when
Forwarding. You can mark a selector as being retained via the appropriate checkbox on the selector in
the Selectors in Policy dialog. Retained Selectors can be used in Policy Rules in the same way as
active selectors and is processed by downgrading rules. Thus if you add a Selector to a Policy as a
retained selector, then any rules associated with that selector and its values are retained and applied in
the policy.
Delete (Selector)
p145
Classifier Administration Server Guide UM644001
Label Dominance
If high-water mark (HWM) checks are configured by a rule, then when a mail message is sent the
message label must ‘dominate’ the labels of any attachments (and optionally Portion Marks).
Note: If you are using Portion Marking in Email Classifier and require message labels to dominate all
Portion marks in the email message body you must also Enable - Ensure label dominates all portion
marking.
The Label Dominance algorithm employs a different check depending upon the selector type:
Single selection list (If Include this selector in clearance and attachment checks is
un-checked the selector takes no part in label dominance operations)
The operation depends on the Hierarchy setting for a Single selection
list:
Hierarchic - the message label value is set to the 'highest' value from
the message and attachment labels.
No Hierarchy - The user will have to be involved in resolving any
incompatible label issues*.
Multiple selection list (If Include this selector in clearance and attachment checks is
un-checked the selector takes no part in label dominance operations).
The union of all values for the selector from the message and
attachments is formed, and subject to the configured Maximum, is
applied to the message label. If the Maximum is exceeded, then the
user will be involved in resolving the issue*.
Freeform text Freeform text selectors take no part in Label Dominance (HW M)
checks.
Date pick The message label value will be set to the 'highest' date of those set
on the label and attachments.
Date item
* For Single valued selectors, it may be not be possible to modify the message label to fully dominate
the attachment labels. For example:
Consider tw o selectors Classification (Hierarchic) and Department (non-hierarchic) and an email
message containing two attachments labelled as Unmarked / Sales and Confidential /
Engineering. Whilst setting a message label of Confidential would address the Classification
values, there is no single Department value that can encompass both Sales and Engineering.
Similar difficulties can arise with Multiple selection list selectors if more values would be required than
are allow ed by the maximum number of values allowed.
In either of the above circumstances, the user should resolve the issue (e.g. modify the attachments, or
use the override check option if available).
p146
Classifier Administration Server Guide UM644001
Marking Library
Admin : Labelling Configurations {configuration} Marking Library
A Marking Format defines how selected labels are presented to end users. Each Marking Format defines
how to construct a Marking using any or all of the features below in an order defined by the Marking
Format:
Fixed Text
Label Elements from the selected label (Labelling Configuration, Policy and Selector Values).
Hyperlinks
Alternative Selector Value Names available as rendering qualifier to Label Element choice.
Environment / Document Properties.
Directory Attributes
Marking Library
p147
Classifier Administration Server Guide UM644001
Marking formats that are to be used for FLOT, LLOT, Portion Marking or email message Subject
markings should include clear delimiters around the entire marking so that Classifier can 'find' the
markings. For example:
[{Configuration Name} {Classification}].
See Recognising and Parsing Label Markings for further information.
Using <whitespace> to separate marking elements can lead to unexpected effects and difficulties
w hen parsing labels. Additional control to avoid these issues is provided for Selector Elements
through the Text Display and Marking Selector options .
You can define Marking Formats that span multiple lines. If you insert a 'new line' using
SHIFT+Enter, the Marking will NOT appear correctly in Microsoft Office Headers or Footers (it w ill be
correct in Outlook FLOT/LLOT). Use Enter (rather than SHIFT + Enter) to insert the 'newline' and the
Marking will appear correctly.
Add a New Marking Format will invoke this Properties (Marking Format) sequence.
You configure a Marking Format as follows:
Select the Marking Library node and select the relevant Marking Format entry .
Choose Properties . This presents a dialog w hich shows the current state.
You can Rename a Marking Format simply by updating the Name field and saving the
change. It will update all instances of that Marking Format Name in the current
configuration.
The initial state for a new Marking Format show s place holder text “Your Marking Format
here”.
p148
Classifier Administration Server Guide UM644001
p149
Classifier Administration Server Guide UM644001
p150
Classifier Administration Server Guide UM644001
o You will always see delimiters plus however many spaces are defined - there is no way of
totally omitting a selector.
If a value contains anything in addition to spaces then:
o The leading and trailing spaces will be removed
Text Display
p151
Classifier Administration Server Guide UM644001
p152
Classifier Administration Server Guide UM644001
Alternate 1 Preview
Date Format
p153
Classifier Administration Server Guide UM644001
p154
Classifier Administration Server Guide UM644001
p155
Classifier Administration Server Guide UM644001
Inserting a Hyperlink
Configure Hyperlink
Set the Text to display and the Hyperlink Address.
Once you are happy, click OK. A Hyperlink placeholder w ill appear at your selected insertion
point as in the example below:
Hyperlink Placeholder
p156
Classifier Administration Server Guide UM644001
p157
Classifier Administration Server Guide UM644001
p158
Classifier Administration Server Guide UM644001
p159
Classifier Administration Server Guide UM644001
p160
Classifier Administration Server Guide UM644001
Align Text
p161
Classifier Administration Server Guide UM644001
removed and replaced using representative values (the first Value for each Selector - or the
appropriate alternative value).
Two representations are shown indicating the effects with and without text formatting
applied.
Note: Not all elements are available in all environments. It is important to check the actual
Marking that appears in all circumstances - especially if it is assigned as the Custom Format
for Summary Markings.
Marking Preview
If Use plain text style is set (Properties (Marking Format) , the Formatted text display area
is not shown.
p162
Classifier Administration Server Guide UM644001
p163
Classifier Administration Server Guide UM644001
p164
Classifier Administration Server Guide UM644001
Content Library
Admin : Labelling Configurations {configuration} Content Library
Note: Content Checking is supported by Email Classifier and Office Classifier (Word, Excel and
PowerPoint).
Note: Content checking of RMS protected items never yields a match as the content is not accessible.
The Configuration can define that checks should be applied when sending an email message or saving /
printing a document to ensure that the content (Subject/ Body/ attachments / document) does not
contain certain 'words'. The attachment types processed during email content checking are listed in
Appendix - Content Checking File Types Supported .
The operation of the search performed can be modified using a registry key setting described under
Matching algorithm control .
The Content Library consists of one or more (Search) Expressions which can be associated with one
or more site defined Matchers. Initially there are no Expressions or Matchers defined and selecting
the Content Library shows:
p165
Classifier Administration Server Guide UM644001
content is allow ed. If a message contains content matching an Expression in the Matcher, then the
message label must be in the defined label set for the content check to pass.
Each Content Checker has a Match Type which is either ANY (the associated content will be
considered as identified if ANY of the Expressions defined matches), or ALL (the associated content will
be considered as identified only if ALL of the Expressions match).
The following actions are available depending upon whether Expressions or Matchers tab is selected
(also via the Content Library context menu):
The following actions are available once a Matcher / Expression has been defined:
When the Expressions tab is selected:
Properties (Expression)
Delete (Expression)
Copy (Expression)
Properties (Matcher)
Delete (Matcher)
Defining Expressions
The comparison operates by comparing 'words', so if your expression is "apple and pie", applepie is one
w ord and w ill not match.
An expression might be a simple (case insensitive) comparison, or more complex.
Regular Expressions:
Need to be enclosed in “##” … e.g. a regular expression to search for two numbers together would
have to be entered as “##[0-9][0-9]”, therefore, if your phrase to look for was ‘banana’ and 'two
numbers together' the search phrase to enter would be: banana AND “##[0-9][0-9]”
Must match a single w hole word. For example, a search for "##app.*ie" would not find "apple pie".
Characters that are not indexed as letters are not searchable even using regular expressions.
The search index does not store information about line breaks. Searches that include beginning /
end of line regular expression criteria (^ and $) will not work.
Particular care must be exercised including "And" or "Or" as text in an expression as these are
'operators' (see Reserved words below) and must be enclosed in quotes if you want them treated
as text. For example, an expression open and closed would match if the message contained both "
open" and "closed" within it. An expression open "and" closed would only match if the string "
p166
Classifier Administration Server Guide UM644001
open and closed" appeared in the document - a similar effect can be achieved by enclosing the
w hole expression string in quotes - "open and closed".
Noise words - such as "if" and "the" are ignored during comparisons.
Reserved words - The following should not be used as "text" when defining expressions:
(comma), (period),?, =, *, %, #, ~, &, ~~, ##, contains, and, or, +, -, [, ], /, \ (esc)
Examples :
Expression Meaning
apple and pear Will match if both "apple" and "pear" appear in the content.
apple and not pear Will match if "apple" appears but "pear" does not appear in the
content.
(apple and pear) or (banana and Will match if at least one of the combinations (apple and pear) or
orange) (banana + orange) appears in the content.
appl? Wildcard expression that will match on apple, but not apples.
"apple pie" Will match if the content contains the phrase "apple pie".
date(jan 15 2012) Matches dates in any of the date formats defined below .
date(jan 10 2012 to jun 30 2012) Matches dates in the defined range (first half of 2012).
Date formats - The following are all recognised as the same date
January 15, 2013
15 Jan 13
2013/01/15
1/15/13
1-15-13
The fifteenth of January tw o thousand thirteen
mail(*@abcxyz.com) Matches email addresses including w ild-card * or ? inside the ().
creditcard(*) Matches credit cards in any of the formats below . Matches credit
creditcard(1234*) cards starting w ith n234.
The following are recognised as credit card number formats:
n234-5678-1234-5678
n234567812345678
n234 5678 1234 5678
Numerical tests used by the credit card issuers for card validity are
used to exclude sequences of numbers that are not credit card
numbers. However, these tests are not perfect and so the credit
card number recognition feature may pick up some numbers that
are not really credit card numbers. The examples above are not
valid credit card numbers and w ill not trigger the checks - valid
credit card numbers must start (n) w ith 3,4,5 or 6.
p167
Classifier Administration Server Guide UM644001
npr-tw-z]{1}[0-9]{6}[a-d]{1}"
"##([a-z]{2}[9]{3}|[a-z]{3}[9] Matches
{2}|[a-z]{4}[9]{1}|[a-z]{5})[0- NON99604079T9900 | NOONE355144BA900 |
9]{6}([a-z]{1}[9]{1}|[a-z]{2}) NONE9701010RW900
[0-9]{3}" but not
ABC12343434F9900 | NOONE355123ASDAS |
NOONE9121234UOUOO
New Expression.
p168
Classifier Administration Server Guide UM644001
Expressions
5. The expressions established can be used when defining Content Matchers ( Properties (Matcher)) and
when defining Conditions (see Properties (Condition)).
Properties (Expression)
1. Select the Content Library and select the Expressions tab. Select the relevant Expression entry.
2. Choose Properties. This presents a dialog which shows the current state.
Expression Properties.
p169
Classifier Administration Server Guide UM644001
3. Change the Name or Expression as required. See Defining Expressions for further details on how
to define the expression.
Delete (Expression)
Note: You cannot delete an Expression that would result in a Matcher w ith no associated expressions.
1. Select the Content Library and select the Expressions tab. Select the relevant Expression entry
.
2. Choose Delete (Expression).
3. Click Y es / No to complete or cancel the operation.
Copy (Expression)
To copy an expression:
1. Select the Content Library and select the Expressions tab. Select the relevant Expression.
2. Choose Copy. A new Expression entry is created (w ith a unique name which can be changed).
p170
Classifier Administration Server Guide UM644001
Matchers
You can select a name for the content matcher and match any or all expressions within the matcher.
Matcher Properties.
3. Supply a Name (this Name is used when defining Content Checking rules.
4. Supply a Description is required - this is for information purposes only.
5. Choose whether Match any or Match all expressions defined for this Matcher must match for the
Content Checking rule to consider the content as matching (and trigger the defined action).
6. The Name, Description and Match any/Match all can be changed later via Properties (Matcher).
7. Click Next. This will present a dialog to allow you to choose the expressions relevant to this
Matcher.
p171
Classifier Administration Server Guide UM644001
Choose Expressions.
8. You can define a New Expression if required, or select one or more expressions from the list
presented.
9. Define the Expression. Examples of Expressions can be found in Defining Expressions.
10. Click Next. This will present a dialog allowing you to define the Label set for which "matched"
content is permitted.
11. The content is not allowed setting means that the defined content is not permitted regardless of
the label value. Selecting this w ill grey out the label selection tree.
12. In the above example, the content is allowed as long as the label is Internal or Confidential AND
Engineering or Board (i.e. anything with Public or Sales w ould fail the content check, as would a
value with only one of Classification or Department set).
13. The Label Criteria can be modified using the Properties (Matcher) action.
p172
Classifier Administration Server Guide UM644001
14. Click Finish and Yes on the change confirmation dialog and the newly created Matcher w ill appear
in the summary.
Properties (Matcher)
1. Select the Content Library and select the Matchers tab. Select the relevant Matcher entry.
2. Choose Properties.
3. You can then view or modify the properties of a Matcher:
Name, Description, ANY/ALL, Expressions, Label Criteria as described in Add a new matcher.
Delete (Matcher)
1. Select the Content Library and select the Matchers tab. Select the relevant entry in the list of
Matchers.
2. Choose Delete.
3. Click Y es / No to complete or cancel the operation.
p173
Classifier Administration Server Guide UM644001
Matcher in use
4. A warning dialog w ill be presented if you attempt to delete a Matcher that is in use in a Rule.
If the current label is NOT in the defined label criteria, then the Warn/Prevent action is activated.
If Warn or Prevent is set (as opposed to Audit only) then the user will be prompted:
If the Show highlighted content matches option is checked in the rule, then the user also has
p174
Classifier Administration Server Guide UM644001
Clicking View will show further information. Select each location and the item contents (including
meta-data such as header / footer values) appears with matches highlighted.
Next / Previous allow you to move up and dow n the selected location (attachment / document /
body).
Note: Highlighting of matches in PDF files is only possible if Adobe Reader / Adobe Acrobat in Edit >
Preferences > Search > Enable search highlights from external server is Enabled.
Content matches
By default the matcher checks various aspects of the message (e.g. Subject, Body and attachments), is
case insensitive and includes document properties.
Two General Settings are provided that allow further control:
HKEY_CURRENT_USER\SOFTWARE\Policies\Boldon James\Classifier
HKEY_CURRENT_USER\SOFTWARE\Boldon James\Classifier
p175
Classifier Administration Server Guide UM644001
Type REG_DWORD
Data Not configured - The default operation applies.
Any value defined w ill modify the search algorithm according to the bit-wise values described in
the dtsearch FieldFlags support w eb page (e.g. s earch for "dtsearch support FieldFlags").
For example:
Value = 3 (1 + 2) would ignore the filename (1) and ignore document properties (2).
The setting w ill apply to all Content Check rules performed by a Classifier application.
Condition Library
Admin : Labelling Configurations {configuration} Conditions Library
The Configuration can define conditions that can be associated with Add Rules, Apply Rules and Check
Rules so that the Rule is only triggered if the Condition(s) are met. For example a rule that applied a
LLOT only if an external recipient w as defined. Initially there are no Conditions defined. Prerequisite
conditions are associated w ith a rule as part of Rules Wizard operation.
Each Condition defined includes one or more compatible (Document or Message) Condition type
definitions:
p176
Classifier Administration Server Guide UM644001
o Date
o IP Address
o MAC address
o Time
o Host Product Locale
o OS Locale
o Product Type
o Day of Week
o Document Content / Document Content Count (Word, Pow erPoint and Exceland Data
Classification Service – Index Mode Only)
o Document Custom Property (All Office applications and Data Classification Service – Index
mode Only)
o Document Event Fired (All Office applications)
o Document has Different Odd & even page header/footers (Word and Excel)
o Document is marked as `final` (W ord, Pow erPoint and Excel)
o Document Property (All Office applications and Data Classification Service – Index Mode
Only)
o Document Protection Type (W ord only)
o Document Template Name (W ord only)
o File Extension
o File Name
p177
Classifier Administration Server Guide UM644001
o File Owner
o File Size
o File Type
Scenarios:
1. A message containing recipients from both domains A and B should have X-header AB applied.
This can be achieved w ith a single condition (Message Recipient Domain condition w ith two entries)
and a single rule.
2. A message w ith a recipient from domain A or domain B should have an x-header A or B added.
This will require two conditions one for each domain, and two rules.
The fact that in this case there may be duplicate rules (at the same point in the rule tree) is handled
by the fact that the rule highest up the tree takes precedence (See Move rule up / down).
p178
Classifier Administration Server Guide UM644001
5. Select the required Condition Type from the drop down menu.
6. Click Add a new condition entry which will display a dialog allowing you to configure the selected
condition type (each type has its own specific settings - the example below relates to Condition
Type Active Directory Values of User):
p179
Classifier Administration Server Guide UM644001
7. You can define multiple Condition Entries for a Condition Type, and specify how the condition entries
combine together. If you combine entries with the AND operator then all conditions must be true.
Alternatively, if you combine entries w ith the OR operator then one or more conditions must be
true
Properties (Condition)
Note: Essentially the same dialog and operation is presented when you Add a new condition.
Edit Condition
4. You can Add a new condition type , Edit or Delete an existing entry.
5. Expanding a Condition using the arrow icon in the left hand column w ill provide condition details.
6. The Edit option allow s you to configure the selected condition type (each type has its ow n specific
settings (the example below relates to Condition Type - Active Directory Values of User):
p180
Classifier Administration Server Guide UM644001
7. Condition entries can be combined using either the AND operators or the OR operator. If you
combine entries w ith the AND operator then all conditions must be true. Alternatively, if you
combine entries w ith the OR operator then one or more conditions must be true. It is the user's
responsibility to ensure that conditions are logically sound.
8. Condition entries can be combined using either the AND operators or the OR operator. If you
combine entries w ith the AND operator then all conditions must be true. Alternatively, if you
combine entries w ith the OR operator then one or more conditions must be true. It is the user's
responsibility to ensure that conditions are logically sound.
9. You can Add a new condition entry , Edit or Delete an existing entry. The example below shows
options for a Active Directory Group Membership of User condition entry.
10. Each Condition type supports one or more Condition entries w ith specific options as per the table
below .
p181
Classifier Administration Server Guide UM644001
Active Directory Attribute If User Active Directory attribute (see attribute list below this
Values of User table) - [Contains value][ Does not contain value] [has value]
[has value matching regular expression] [has a value not
matching regular expression]. See also Cache Active Directory
attributes on start-up.
Active Directory Group [Specifically the logged on user or in the case of OW A the
Membership of User Originator]
User is/ is not a member of the specified Active Directory group
or an Active Directory group matching the supplied regular
expression.
Date Date [is] [is not] [is after] [is before]
Day of Week Values: Monday, Tuesday, Wednesday, Thursday, Friday,
Saturday, Sunday
Document Content Combinations that Do or Do Not match existing Expressions
Document Content Count defined in the Content Library. For example:
(Email, Word, Excel and Expressions finds a match w ith (Expression) Apples AND
Pow erPoint) and Data Expression does not find a match w ith(Expression) Bananas.
Classification Service –
Index Mode)
Document Custom Property Document (Custom) Property Name.
Document Property
Check (appropriate value or existence check type).
IP Address Computer's IP address [is] [is not] in Netw ork (values IP address
and Subnet mask)
Mac Address Computer [has] [does not have Mac address] [matches regular
expression] [does not match regular expression].
Message Class Message Class[ equals] [does not equal] [starts w ith] [ends
w ith] [contains] [does not contain]
Message Content Combinations (AND or OR) that Do or Do Not match existing
Message Content Count Expressions defined in the Content Library. For example:
Expressions finds a match w ith (Expression) Apples AND
Expression does not find a match w ith(Expression) Bananas.
Message Has Attachment Message [has] [does not] have attachment w ith an extension
w ith Extension that equals Value.
Note: Embedded images may be excluded using the Include
embedded images when performing attachment checks setting.
p182
Classifier Administration Server Guide UM644001
Message Has Attachment Attachment name [equals ] [ starts w ith ] [ends with] [contains]
w ith Name [matches regular expression]
Does not have attachment name that [equals] [contains]
[matches regular expression].
Note: Embedded images may be excluded using the Include
embedded images when performing attachment checks setting.
Message Has Unclassified Message [has] [does not] have Unclassified attachments.
Attachments Note: Embedded images may be excluded using the Include
embedded images when performing attachment checks setting.
Message Originator Domain Originator domain [equals] [does not equal] [starts w ith] [ends
w ith] [contains] [does not contain].
Message Originator Email Originator email address [equals] [does not equal].
Address
Message Recipient Attribute Check for recipient w hose address book properties match the
values specified value
Message Recipient Count Contains [more recipients than] [few er recipients than] Recipient
count (Distribution lists are not expanded w hen this check is
performed.
Message Recipient Domain [Contains recipients in domain] [Does not contain recipients in
domain] - checks that the address contains the supplied string -
case insensitive
Message Recipient Location Message [contains recipients that are] [does not contain
recipients that are] Internal / External
Message Recipient Presence Message [contains recipient] [does not contain recipient] [There
is one recipient and it is] [There is one recipient and it is not].
Recipient address (an exact match is performed - case
insensitive)
Message Response Type Message [is] [is not] of type Reply / ReplyToAll / Forw ard.
Message Type Message Type [equals] [does not equal] Message / Meeting /
Task.
Product Type Running application is or is not one of the Classifier supported
products (Outlook, Word, Excel, Pow erPoint, Project or Visio).
File Custom Data - only [Contains value] [Does not contain value] [Has value] [Does not
applies to Import Mode. have value] [Matches RegEx][Does not match RegEx]
File Extension [Contains value] [Does not contain value] [Has value] [Does not
have value] [Matches RegEx][Does not match RegEx]
p183
Classifier Administration Server Guide UM644001
File Name [Contains value] [Does not contain value] [Has value] [Does not
have value] [Matches RegEx][Does not match RegEx]
File Owner [Is][Is not] [Contains] [Does not contain] [Matches Regex] [Does
not match RegEx]
File Path [Is][Is not] [Contains] [Does not contain] [Matches Regex] [Does
not match RegEx]
Copy (Condition)
To Copy a Condition:
Delete (Condition)
To delete a Condition:
Condition in use
p184
Classifier Administration Server Guide UM644001
p185
Classifier Administration Server Guide UM644001
Question Library
The Question Library is a repository that stores questions and answers that are used to create
Decision Trees for use in various scenarios. From these questions and associated answers the
Decision Tree guides the user to select which label to apply.
This Question Library that is located together with the other libraries outside of and available
to the configured policies.
Columns
Actions
Question Properties
Enable the Decision Tree Functionality
Decision Tree Editor
Note: There will be language variations when the adm in tool’s Allow multiple languages
option is enabled
Note: This feature we will only support plain text.
p186
Classifier Administration Server Guide UM644001
Columns
The top-level summary page of the Question Library presents the following columns:
Name: Enter a name to refer to this question within the admin tool.
Description: Enter the question. The question is truncated to a single line.
p187
Classifier Administration Server Guide UM644001
Actions
Question Library
The area where a user can create and manage Questions and associated Answers.
[Selected Question]
Properties
The properties option presents a Question property dialog allowing a user to edit the
selected question properties and associated answers.
Copy
Delete
If you confirm the deletion of the Question the adm inistration servic e provides a warning
if the Question is being used in a Dec ision Tree.
p188
Classifier Administration Server Guide UM644001
Question Properties
Note: The name is required and the nam e must be unique within the Question Library.
Note: The size limit for text fields defaults to 1000 characters
p189
Classifier Administration Server Guide UM644001
Add a Question
Adds a new Question and associated Answers to the Question Library.
Question Properties.
p190
Classifier Administration Server Guide UM644001
7. Enter a tooltip. This is the Question tooltip text as it appears on the Decision Tree
Client dialog.
8. Enter the answer selection(s) by clicking on the New Answer button. Enter a Name,
Description, Answer, Tooltip and select a Language. Click OK. The answers can be
moved up or down in the list by selec ting the Up or Down text. To edit, select the
Edit text or to delete, select Delete text.
9. In the drop down menu, select the Selection Style. This can be Single Select (one
option) or Multi Select (multiple options to select in a list). Click OK. The new
question that has just been added will appear in the Question Library
p191
Classifier Administration Server Guide UM644001
p192
Classifier Administration Server Guide UM644001
Note: The Administrator must define a list of questions in the “Question Library.”
The top of the tree is called Decision Tree. This serves to provide a starting point for the
Administrator to add questions. It also provides a Properties option to control the layout of
the Decision Tree dialog on the client.
p193
Classifier Administration Server Guide UM644001
Only a single label node may be added per answer. The Label menu item will then be grayed
out and the Properties menu item used to edit the label. When a node is selected then the
relevant operations will enabled for the selected item.
p194
Classifier Administration Server Guide UM644001
Remove a Node
A user can remove a node from the Decision Tree.
To remove a node:
1. Within the Policy, select the Decision Tree Tab and within the Decision Tree select the node to be
removed. Right click and select Remove from the context menu.
2. When removing a node an "Are you sure you want to remove this item?" question will
appear. Click Yes. All the child nodes of the selected node will also be deleted. Answer
nodes cannot be deleted here.
p195
Classifier Administration Server Guide UM644001
1. Within the Decision Tree Editor, select the node below which you want to add a new
Question. Right click and select Add. An Add Question Window will appear displaying
available questions.
2. Select the required question and click on the OK button. The result will display the
question and the the answers underneath.
p196
Classifier Administration Server Guide UM644001
p197
Classifier Administration Server Guide UM644001
Note: Display style will depend on whether the question has been defined in the Question
Library as single or multi-select.
Question Properties.
1. Within the Policy, right click on the question node and c lick Edit. An Edit Question Window
will appear displaying available quest ions.
2. Select the answers that will be available in the polic y.
3. In the dropdown list, select the display style. Select Display values as a list. Click OK.
p198
Classifier Administration Server Guide UM644001
Set a Label
A label can be set for an Answer Node is selected in the Decision Tree.
Note: You can only add label changes to m ulti-select answers that are processed from the
first answer until the last.
Label Properties.
To set a label:
1. Within the Decision Tree, right-click on the answer node and c lick Edit. A Classification
Window similar to the one above will be presented. The actual content of the
Classification window will depend on your c onfiguration. For our example configuration,
choose required label elements as described below.
2. In the Sensitivity dropdown menu, select one of the sensitivity options; Unmarked,
Sensitive, Commercial-In-Confidence .
3. In the Distribution dropdown menu, selec t Internal or External.
4. In the Project dropdown menu, select one of the options. Clic k OK.
p199
Classifier Administration Server Guide UM644001
Bottom Pane
For answer nodes with an associated Label the bottom pane shows a description of the label changes
to be applied. These can be label element items to add or Selectors to clear.
p200
Classifier Administration Server Guide UM644001
Configuration Settings
Admin : Labelling Configurations {configuration} Configuration Settings
Opening Configuration Settings provides access to settings that are common across all policies in this
Label Configuration. The settings apply to all policies – that is users operating under different policies
w ill see no difference with regard to these settings.
Configuration Settings
p201
Classifier Administration Server Guide UM644001
Item Outl'k OWA Mail Notes Mob Word Ex'l P'Point Project CAD S'Point
Add-in Visio & F ile
3.10.0
Allow classification of meeting OL O(A)
requests and appointments
Allow classification of tasks OL O(A)
p202
Classifier Administration Server Guide UM644001
Portion Marking OL W Ex PP
p203
Classifier Administration Server Guide UM644001
p204
Classifier Administration Server Guide UM644001
Enabled - The Classifier Label selection features w ill be presented in the Ribbon / Ribbon bar and tasks
w ill be labelled in the same manner as other messages.
Disabled (default) - The Classifier Label selection features w ill not appear in the Ribbon / Ribbon bar
and tasks w ill not be labelled.
Note: The label summary bar may not be shown when choosing to assign a task to someone.
p205
Classifier Administration Server Guide UM644001
p206
Classifier Administration Server Guide UM644001
If this setting is Enabled, and a high-water mark check rule is triggered because labels of attachments
are higher than the current message label, and it is possible to derive a label for the message that will
dominate all attachment labels, then the policy check dialog w ill present an Upgrade message button.
If the setting is Disabled, or a high-water mark label cannot be derived, then only a Remove
(attachment) button will be presented.
Disabled Visual marking rules w ill never be applied to a meeting request response.
On Edit Response Visual marking rules w ill be applied if the user chooses Edit the response
before sending.
On Send Response Now Visual marking rules w ill be applied if the user chooses Send the response
now.
All Visual marking rules w ill always be applied.
p207
Classifier Administration Server Guide UM644001
For Hierarchic Selectors ( Single selection list) it will set the selector value to the highest value from
the message and the set of attachments and Pass the check.
For informational Selectors (those with Include this Selector in Clearance Checks unset - Single
selection list and Multiple selection list) it will retain the message setting for the selector regardless
of any attachment values and Pass the check.
For all other Selectors if a single value is available for the selector that will dominate the message
and attachment values for that selector, then the message label will be set to that value and the
check is Passed. If no such value is available, the check fails and the user will be notified of the
issue.
So a message labelled as "Confidential" with an attachment of "Confidential Sales" would have its label
p208
Classifier Administration Server Guide UM644001
automatically changed to "Confidential Sales", but a message labelled as "Confidential Engineering" with
an attachment of "Confidential Sales" triggers the dialog described in Attachment Handling.
If this setting is Enabled, then the setting Allow manual upgrade when sending messages has no effect.
Disabled - (Default) File Classifier just presents the action in the context menu.
p209
Classifier Administration Server Guide UM644001
p210
Classifier Administration Server Guide UM644001
Deploy the configuration change. You can then add the named column into the Inbox folder
as follows:
Start Outlook
Select the Inbox folder.
Send a Classifier labelled message to that folder.
Open and close the received message.
Select View / Add columns (or Position the cursor over the headings for the Inbox and
choose Field Chooser from the context menu). This presents the dialog below. Select
User-defined fields in Inbox from the drop down.
Field Chooser
Note: The 'Column' name you assign does appear in the above list if you have chosen a
value that already appears in one of the other lists available under Field Chooser (e.g. Label
appears under All Appointment fields). You can check this by using the Manual definition of
column name mechanism described below.
Select the required field and drag this into the required position in the folder column
headings.
You can then replicate that Folder View to all other folders using the View / Change /
Apply Current View to Other Mail Folders action. Consider selecting the parent nodes
and using the Apply view to subfolders setting.
Manual definition of column name
You can manually make your column name available in any folder as follows:
Select the folder. Invoke Field Chooser and choose User-defined fields in folder . Click
New... and enter your configured Column name (e.g. Classifier Label).
If you enter a name that is already in use in one the other lists you will be notified:
p211
Classifier Administration Server Guide UM644001
p212
Classifier Administration Server Guide UM644001
Navigate to the policy catalogue and open the current client configuration.
Select Settings / Operational Modes and Modules and then verify that Outlook
Add-ins / Activate 3rd Party Add-in Integration is Enabled .
Go to Settings / Email Protection and under the Outlook 3rd party integration
section select Boldon James from the Vendor Name list.
Re-publish the ePO policy.
Portion Marking
p213
Classifier Administration Server Guide UM644001
p214
Classifier Administration Server Guide UM644001
p215
Classifier Administration Server Guide UM644001
p216
Classifier Administration Server Guide UM644001
Search for Outlook Item Properties that match email label locations
Enabled - (Default) File Classifier icon overlays w ill include the Classifier symbol .
Disabled - File Classifier icon overlays w ill NOT include the Classifier symbol .
p217
Classifier Administration Server Guide UM644001
p218
Classifier Administration Server Guide UM644001
p219
Classifier Administration Server Guide UM644001
set to Warn, then the general Rule exception dialog is displayed with the Remove/Back/Continue
options.
The text in the body of this dialog is controlled by the relevant application Rule.
p220
Classifier Administration Server Guide UM644001
p221
Classifier Administration Server Guide UM644001
Disabled - The Office application ignores the custom property when a document is opened. However,
actions such as Save and Print may still trigger an update of markings.
Note: Newer versions of File Classifier and Power Classifier provide control over the setting of the
refresh custom property as described in the relevant product guide.
p222
Classifier Administration Server Guide UM644001
This setting influences the operation of Check for the high-water mark . If the setting is Enabled, then
the user w ill be 'warned' of any failure to access a file during those checks. Such failures can arise for
example if encrypted ZIP files are attached, or the document is in a format inaccessible to Classifier
(e.g. an old PDF format). Further details can be found under Attachment Handling.
p223
Classifier Administration Server Guide UM644001
General Settings
Item Outl'k OWA Mail Notes Mob Word Ex'l P'Point Project CAD S'Point
Add-in Visio File Cl
API
Box
p224
Classifier Administration Server Guide UM644001
p225
Classifier Administration Server Guide UM644001
URL for your labelling help site OL O Notes W Ex PP Pr+V CAD SP+F
Enabled If enabled, Classifier automatically expands the text the first time the Policy Check
Dialog is displayed, and includes the follow ing button:
p226
Classifier Administration Server Guide UM644001
Disabled (Default) - Classifier will only cache Active Directory attributes w hen first referenced.
Enabled - Classifier will cache Active Directory attributes when the application starts.
p227
Classifier Administration Server Guide UM644001
Classification History
p228
Classifier Administration Server Guide UM644001
p229
Classifier Administration Server Guide UM644001
Note: This setting is not applicable to OWA Classifier, Classifier Mail Add-in, Notes Classifier or Mobile
Classifier.
This setting defines how Classifier inserts the Classifier label ribbon group. It supports two values and
by default it is Disabled:
Disabled With the option disabled for Classifier Ribbon button as a gallery, then the normal display
of Classifier icons is displayed on the Office Ribbon bar as shown below in the three
different modes.
Enabled With the option enabled for Classifier Ribbon button as a gallery, then the smaller real
estate display of Classifier icons is applied to the Office Ribbon.
p230
Classifier Administration Server Guide UM644001
p231
Classifier Administration Server Guide UM644001
Note: Other softw are and or site/user configuration of the ribbon bar may have an effect on where the
Classifier ribbon group actually appears.
p232
Classifier Administration Server Guide UM644001
Standard mode - This mode will move the label options into a single drop down split button and
the other menu and options are rationalised into more meaningful groups. The label split button will
contain a gallery of single click elements as w ell as options w hich relate directly to the label.
Minimal mode - This mode will show just one button on the ribbon. This split button contains all
the Classifier functionality in one place.
p233
Classifier Administration Server Guide UM644001
p234
Classifier Administration Server Guide UM644001
When presenting the Summary Marking in the Information Bar in a document or message window.
The display of the Summary Marking is controlled by the Show Summary Marking in Task Pane for
Email Classifier or Office Classifier and Show Summary Marking in Title Bar (Word / Excel /
PowerPoint) settings.
Note: Under OWA Classifier, Classifier Mail Add-in, Notes Classifier and Mobile Classifier the
summary marking is always presented (there is no configuration setting).
p235
Classifier Administration Server Guide UM644001
a valid classification.
Use Single Click with pre-defined labels is Enabled for the policy.
Not all selectors are accessible via the ribbon (e.g. Text entry etc.).
If either of the above applies, then either a Label dialog button or a dialog launcher glyph is presented
according to this setting.
Disabled (default) A Classifier Label button does not appear - the dialog launcher glyph w ill
appear instead.
p236
Classifier Administration Server Guide UM644001
This setting provides control over w hether the* appears alongside missing mandatory selectors in the
label dialog.
Disabled The * will not appear alongside missing mandatory selectors in the label dialog.
Enabled (default) The * will appear alongside missing mandatory selectors in the label dialog.
p237
Classifier Administration Server Guide UM644001
o If a default value is defined and not masked, then select the defined default.
o If there is no default defined, or the default is masked, then select the first available value.
If the user opens a labelled draft message, or an labelled document containing a selector value for
w hich they are not cleared, then the Label UI includes that existing value in the available list.
p238
Classifier Administration Server Guide UM644001
BackStage View
Disabled Classifier Label Options appear in their usual location on the Ribbon Bar.
p239
Classifier Administration Server Guide UM644001
p240
Classifier Administration Server Guide UM644001
[Note that in the last case 'no value selected for Classification' is significant].
p241
Classifier Administration Server Guide UM644001
This default text may be replaced by site defined text via this setting. The setting is configured via the
drop dow n list in the right hand column. Selecting the blank entry Disables the setting (the default text
is presented). Selecting a User Message from the list presented Enables the setting and will replace the
default text with the text defined by the User Message.
This default text may be replaced by site defined text via this setting.
The setting is configured via the drop dow n list in the right hand column. Selecting the blank entry
Disables the setting (the default text is presented). Selecting a User Message from the list presented
Enables the setting and will replace the default text with the text defined by the User Message.
p242
Classifier Administration Server Guide UM644001
This default text may be replaced by site defined text via this setting.
The setting is configured via the drop dow n list in the right hand column. Selecting the blank entry
Disables the setting (the default text is presented). Selecting a User Message from the list presented
Enables the setting and will replace the default text with the text defined by the User Message.
p243
Classifier Administration Server Guide UM644001
This default text may be replaced by site defined text via this setting.
The setting is configured via the drop dow n list in the right hand column. Selecting the blank entry
Disables the setting (the default text is presented). Selecting a User Message from the list presented
Enables the setting and will replace the default text with the text defined by the User Message.
p244
Classifier Administration Server Guide UM644001
Classifier includes a default text string that appears in the user dialog presented if a Policy check ( Check
rules) is configured and fails (e.g. One or more recipients of a message is not cleared for the current
label). An example of the dialog is shown below.
The text in the body of the dialog is controlled by the relevant application Rule.
The text that appears at the top of the dialog may be replaced via this setting (applicable to all
Classifier applications).
If the Remove action is available and the user chooses Remove, and the operation resolves all
issues, the underlying operation (e.g. Send / Save) does not require any further user involvement.
This setting defined the User Message shown in the dialog presented after successful resolution (e.g.
Remove) of Policy Check issues. The setting is configured via the drop down list in the right hand
column. Selecting the blank entry Disables the setting. Selecting a User Message from the list
presented Enables the setting.
The example dialog below shows the User Message Title appearing as a heading (Resolved policy issues
(SETTINGS)), and the message Text underneath (Policy resolution has completed).
p245
Classifier Administration Server Guide UM644001
The information bar at the bottom of a document window or an email message window if the Show
Summary Marking in task pane setting is Enabled.
The Window title for Word, Excel, and Pow erPoint (not 2010/2013) subject to Show Summary
Marking in Title Bar the setting is Enabled.
If there is no label defined (and this is valid in the policy), then any Markings using Message Formats
(e.g. FLOT) will just include blank space for each element referenced in the Format.
Note: This may be referred to as the "No Label text" and may be displayed if the document is
'unlabelled' or if the document contains Classifier label information, but with no values selected (empty
label).
p246
Classifier Administration Server Guide UM644001
p247
Classifier Administration Server Guide UM644001
Label Locations
Label Locations
You can Add, Edit and Remove Label Locations by selecting the appropriate Add, Edit or Remove
button.
Clicking Add will insert a new row containing default settings which you can then Edit, which will
present a dialog allowing you to change the configured settings.
p248
Classifier Administration Server Guide UM644001
p249
Classifier Administration Server Guide UM644001
p250
Classifier Administration Server Guide UM644001
When a message or document is opened and there is no Classifier Label property (e.g. Classifier will
check any Label Locations defined to see whether there is a Marking present which can be used to
derive a Label Value.
o Recognise and remove any FLOT or LLOT on the original email and replace it w ith markings
matching the current label.
o Recognise and remove any Subject Prefix or Suffix on the original email and replace it by a
marking that matches the current label.
To facilitate marking recognition, Marking formats used for parsing must include clear unique delimiters
as part of the Marking Format definition (e.g. [marking]). In addition, string based selectors (Text entry,
Date picker and Date offset) need to have Prefix and Suffix defined (see Marking Selector options ).
Marking Parsing
Classifier takes a string that it believes contains a Marking (determined using Marking Recognition
above) and uses the designated Label Location Marking Format (working left to right) to determine a set
of Label values (from the available Selectors) that produces that Marking.
The parsing essentially breaks the Marking into chunks that are either text or a label element, and for
label elements tries to determine the Selector value. The process allows for label elements included in
the marking format that have no value, and it also allows for the use of Alternate Selector label values.
If the Marking contains an alternative value then the appropriate primary Selector value is adopted by
the object label. This mechanism can be used to provide a 'mapping' between external and internal
values. For example:
Consider an organisation XYZ that internally has a Classification value of "Confidential", but receives
messages from a collaborative organisation (ABC) that may store "Sensitive" in a X-Header (e.g. X-ABC-
Classification). It wishes to map Sensitive to Confidential internally. So:
Define a Marking Format "ABC Sensitivity" that just contains the Classification label element but
with the Alternate value selected.
Define an X-Header Label Location X-ABC-Classification and associate the ABC Sensitivity
Marking Format.
p251
Classifier Administration Server Guide UM644001
The Label Locations feature allow s you to tell Classifier the (document and email/webmail) properties
that may contain label values that have not been established by Classifier (e.g. messages arriving from
another organisation). If Classifier can derive a label from a label location it will assume that label for
the document/message. Once Classifier has derived a label from a label location via the Label Locations
feature, it doesn’t process any remaining Label Locations.
In some circumstances, label values from external sources may be contained in multiple properties.
Combined Label Locations allow s values found in multiple locations into a derived label.
Multiple ‘combined label locations’ can be created. Each ‘combined label location’ can be assigned a
Name and Description to describe its purpose. Within each ‘combined label location’ you define the
locations as per the ‘Label Locations’ feature.
For non-Classifier labelled content, Classifier w ill start with the first ‘Combined Label Location’ and try
and create a label using the configured locations. If a label can’t be derived, Classifier will then move
onto the next ‘Combined Label Location’, and so on. If a label can’t be derived from any ‘Combined
Label Location’, Classifier w ill process the standard Label Locations to see if it can derive a label.
p252
Classifier Administration Server Guide UM644001
POLICIES
Admin : Labelling Configurations {configuration} Policies
The Label Configuration settings are made available to end-users through Classifier Policies. Each Policy
defines:
The Policy Label UI presented (Selectors and Values available and how they appear to users of that
Policy), and presentation control through User Interface Definition.
The Maximum number of labels to show (Recently used), Use Assisted Labelling and Use Single Click
w ith pre-defined labels features are available.
The Policy Rules governing the application of Markings to Object Locations and the invocation of
“other” actions (e.g. applying RMS and S/MIME security).
One Classifier Policy can be used as the basis for a new policy through a ‘ Copy’ function.
Once you have defined a Policy it is published (as part of the configuration) to File store or to AD and
deployed to users using locally defined or group policy mechanisms. One Classifier Policy may be
associated w ith multiple Group Policies.
There must alw ays be at least one Policy defined. If your requirements are straightforward one Policy
may be sufficient with all users having the same capabilities. Additional Policies may be required if for
example, you want to limit the ability of some users to apply certain label Selectors / Values.
Access to all Policy Administration is through the Policies node under the Label Configuration. Selecting
this node show s a list of the current policies below the Policies node, and in the Policies summary
display to the right.
Policy administration actions appear under the following headings:
Actions that configure the Policy UI settings (Selectors and Selector Values) described in Policy Label
UI.
Actions to define Default Label (Policies) that can then be referenced for use in SharePoint Classifier
and Intelligent Default features.
Actions that configure the Policy Rules described in Policy Rules Management.
Details of all the rules supported is provided in Rules supported. Rules fall into three general types
as described in the subordinate topics - Add rules, Apply rules and Check rules.
Policy Management
Admin : Labelling Configurations {configuration} Policies
This section describes the actions that can be performed when the Policies list window is visible.
p253
Classifier Administration Server Guide UM644001
The effects of a policy can be tested using Publish Test Configuration in conjunction with Test Mode
Administration.
Policy Management
Selecting a specific policy will present various tabs in the central frame. Enabling an option (e.g. Use
Assisted Labelling) may add an extra tab (e.g. Connect Selectors) to the central frame.
The contents of the central frame change depending upon the tab selected. The example below shows
the display with Set Selectors tab selected.
p254
Classifier Administration Server Guide UM644001
The detailed settings in a Policy are available w hen an individual policy is selected in the policy tree,
along with the relevant tab and are described in:
Policy Label UI
Suggested Classifications
Rules Management
p255
Classifier Administration Server Guide UM644001
The Add a New Policy section describes how to add a new policy.
Admin : Labelling Configurations {configuration} Policies Add a new policy
p256
Classifier Administration Server Guide UM644001
Default Language
4. Select OK and the new ly created Policy will appear in the Policies summary list. Once you have
created a Policy it appears under the Polices node in the left hand pane.
5. Selecting a Policy w ill change the adjacent pane to provide access to the underlying configuration.
The pane show s a summary of the Rules or Selector information, although when a new policy as
added the display w ill be empty (No Selectors and no Rules defined).
6. Configuration of the Selectors is described in Policy Label UI and Rules configuration is described in
Rules Management.
Properties (Policy)
Note: The Use Assisted Labelling setting can never be unset on a policy once it has been set.
p257
Classifier Administration Server Guide UM644001
Policy Properties
p258
Classifier Administration Server Guide UM644001
If you set Use Single Click with pre-defined labels, an extra Tab appears in the central frame that gives
access to the Single Click configuration features (example below ). Similarly if you set Use Assisted
labelling, an extra tab (Connect Selectors) is added.
p259
Classifier Administration Server Guide UM644001
Note: Policy names must only contain characters that are permitted in file paths except *, ?, : and . .
Policy Name - (Only for the Administrator). The policies are not visible to end-users.
Description - (Optional) Only for the Administrator. The description is not visible to end-users.
The Maximum number of labels to show controls the Recently used Labels feature - see also Display of
Favourites button).
This setting (on the Policy properties dialog) determines the number of label values remembered for
each of "Recently used Labels" and "Recently used Portion Marks ".
If the Maximum number of labels to show is zero , then the Recently used Labels and Portion
Marks features are effectively D isabled. The user is never presented with the " Recent" lists.
If the Maximum number of labels to show is > zero , then the Classifier maintains a list of the
most recently used labels and a list of the most recently used Portion Marks. The entry at the top of
a list is the most Recently Used Labels or Portion Mark . The lists are maintained in the Current
User section of the Registry.
Note: Even if a recently used Portion Mark list is maintained, it is available to the user if Portion
Marking is Enabled in the application (see Portion Marking).
See Recently Used Labels and Portion Marks for a description of when and how these lists appear to the
user.
Note: The Use Assisted Labelling setting can never be unset on a policy once it has been set.
Note: The user interface for Assisted Labelling operates differently between Office and OWA
environments.
If the setting on the Policy properties dialog is unset, label selection is standard. The user sees
p260
Classifier Administration Server Guide UM644001
If the setting is set then label selection operates as described in Assisted Labelling Operation .
Once you set Use Assisted Labelling for a policy you cannot unset it. The following warning is
presented.
1. Click OK.
2. Select Cancel (on the Policy properties dialog) and take a copy or click OK to proceed.
3. Once you have set Use Assisted Labelling, an additional tab Connect Selectors appears when that
policy is selected, so that Assisted Labelling selectors can be configured.
p261
Classifier Administration Server Guide UM644001
p262
Classifier Administration Server Guide UM644001
If Enabled, a Set current label as default option appears in the Favourites menu assuming the
Display of Favourites button is also Enabled.
p263
Classifier Administration Server Guide UM644001
If Enabled, the default label that is applicable to a new document or email is determined by combining
any existing configured Default Label with entries in the Default Label (Policies) section that have
matching conditions attached to them.
Note: If the ‘User Selectable Default Classification ’ feature is enabled and a user has defined their own
default label, then the ‘User Selectable Default ’ will be used rather than any derived ‘Intelligent Default’
Using the Intelligent Default feature negates the need to duplicate policies where the only difference
betw een policies is the default label.
When deriving an Intelligent Default, a Classifier product will take the configured default label as the
starting point for the Intelligent Default. It w ill then determine which Default Labels have a matching
condition attached to them. These w ill be processed in turn, starting with the lowest priority, and the
values for each applied to the Intelligent Default label.
Note: As the matching Default Labels are processed, any existing values that are currently in the
Intelligent Default w ill be replaced even if the existing value dominates the value from the matching
Default Label
By defining appropriate conditions on labels in the Default Label section, you can configure different
default labels as required for your organisation. For example, you may wish to have a different
default label when a user in a ‘Finance’ group creates a new Excel w orkbook as opposed to when a
user in a ‘Marketing’ group creates a new PowerPoint presentation.
The Use Single Click WIth Predefined Labels section will show you how to create a predefined
label.
Note: Single Click and Assisted Labelling can be used together, but you will not be able to configure
Single Click until you have added at least one selector under the Connect Selectors Tab.
Note: Changing a policy name that has been deployed invalidates any instances of that name set
through Group Policy configuration. Changing the description will have no side effects.
If you set Use Single Click with pre-defined labels, an extra Tab appears in the central frame that gives
access to the Single Click configuration features (example below ). Similarly if you set Use Assisted
labelling, an extra tab (Connect Selectors) is added.
p264
Classifier Administration Server Guide UM644001
The standard label selection interface presents the available Selector values as 1 to 3 lists.
You can choose to pre-configure up to 12 label values that then appear as individual buttons in the
Ribbon Bar. The user still has the ability to select individual selector values via the Classifier Label
dialog box launcher arrow.
This topic describes configuration of the feature, additional information on the user experience can be
found in Single Click operation.
The initial state (with Single Click Enabled on the policy but un-configured) appears as:
p265
Classifier Administration Server Guide UM644001
Note: You can configure any of the buttons. Configured buttons do not have to be adjacent and use
Publish Test Configuration to view the user effects.
p266
Classifier Administration Server Guide UM644001
6. If you wish the button to be visible select the Show this button on the client checkbox. This will
make the other settings become available. If you uncheck Show this button on the client , any
settings for the button w ill be remembered, but the button is not shown to the user.
7. To choose the label value to be assigned to this button, click on the Label button. This will present
a dialog allowing you to choose the label value.
8. Select the the label value that w ill appear on the label.
9. Click OK. To clear all the values for the button, click Clear. This will clear all values for the selected
button except for Show this button on the client .
10. In the drop down box, select the language. In Global Settings you can enter the text for each
language you have choosen.
11. Enter the caption text that w ill appear on the button. For example, SEN/INT/SALES.
12. Enter the text for the tooltip on the button.
13. Set the required button display options:
Caption only - If this option is selected, only the configured caption is displayed.
Show colour - If this option is selected, it w ill display a colour block. By default the colour is taken
from the Selector value configuration setting. To select a specific colour, in the drop down menu,
select the preferred colour block. A solid colour block (16*16) w ill appear in front of the caption.
Show image - If this option is selected, the selected image appears in front of the caption. An
image may be selected in the drop dow n menu provided which will display all the configured images
that have been placed in the Image Library. The image will be scaled to fit w ithin the 16*16 space.
p267
Classifier Administration Server Guide UM644001
14. If you select Clear, it will clear all the values for the selected button except for Show this button
on the client.
15. Click OK.
The result of adding a Single Click predefined label. The buttons colour and detail is displayed.
Note: This setting is not applicable to Notes, Mail Add-in nor Mobile Classifier.
This setting controls the visibility of Selector captions in the ribbon bar:
In the examples below Display selector values as buttons (Single selection list options ) is Enabled
for the first selector:
p268
Classifier Administration Server Guide UM644001
This value is only relevant if you have Enabled the Display selector values as buttons for one or
more Single selection list selectors or for a multi-selection list selector as described in Single selection
list options / Multiple selection list options .
The Classifier ribbon bar can accommodate a maximum of three rows of selector information. This
setting can be used to control how Classifier wraps these buttons within the Classifier Ribbon Bar.
If this value is not set (default), then Classifier will display the defined buttons for a selector on a single
row.
Each selector shown in the Ribbon Bar will start on a new row regardless of whether Display selector
values as buttons is Enabled or Disabled.
If there are more than three row s in total to appear in the Ribbon Bar (after wrapping), Classifier
reverts to the default (single row per selector) and the Classifier label
Standard Ribbon Bar re-sizing actions apply, so it is a site responsibility to check that the settings
configured are appropriate for the number of selectors and values to be displayed.
Examples of the effects of this can be found under Ribbon Bar examples, Label Selection dialog , Assisted
Labelling Operation and Tabs.
p269
Classifier Administration Server Guide UM644001
p270
Classifier Administration Server Guide UM644001
Default Language
You can select the default languiage for the user interface. This allows you to choose the Policy Default
Language to be used by the algorithm for finding the language to display to find the correct (language
related) value to present to a user. See Properties (Classifier Administration .
The Image Library where you can add languages to the user interface.
Adding languages w ithin Global Settings. There is also an option to add different versions of languages.
3. To add a language click on the Add button. To remove a language, click on the Delete button.
These languages will appear in the follow ing drop down menu.
p271
Classifier Administration Server Guide UM644001
p272
Classifier Administration Server Guide UM644001
Settings
The Policy User Interface Settings and the Suggested Classification Settings.
p273
Classifier Administration Server Guide UM644001
p274
Classifier Administration Server Guide UM644001
Note: The Style to Apply and Image To Apply options apply to the Label dialog, Policy Check dialog,
Challenge dialog, Organise Favourites dialog and Decision Tree dialog.
Note: The Caption Placement and Tab Placement only apply to the main Label dialog.
Base Colour
Caption Placement
Custom Image
Image to Apply
Style to Apply
Tab Placement
Title Colour
p275
Classifier Administration Server Guide UM644001
Base Colour
The custom colour for the header section of the user interface when using the Custom Theme.
Note: The Base colour and Title colour only applies in the Custom Theme.
p276
Classifier Administration Server Guide UM644001
Caption Placement
Places a caption of the selector on the left (default) or at the top.
Microsoft Office Theme with custom image and captions at the top.
3. Click OK.
4. Check the Office Application to see the applied caption placement.
p277
Classifier Administration Server Guide UM644001
Custom Image
A user can select an image from the Image Library to display on the UI
Note: This does not apply when using the Classifier Theme.
p278
Classifier Administration Server Guide UM644001
p279
Classifier Administration Server Guide UM644001
Image to Apply
This controls what image is displayed in the dialog. There are 3 different types of selections, Default
Image, Custom Image or No Image.
p280
Classifier Administration Server Guide UM644001
To select an image:
Custom Image - Replaces the default image w ith a custom image which is selected from the
Image Library.
3. Click OK
4. Open up an Office Application to see the image.
There are also options that can be set in outlook to make the theme Colorful, Dark Grey, Black or White.
p281
Classifier Administration Server Guide UM644001
p282
Classifier Administration Server Guide UM644001
Enabling the Show top three favourites in the Classifier Administrator Policy Settings.
p283
Classifier Administration Server Guide UM644001
This screenshot shows how you add a current label to your favourites and a list of the top three
favourites.
p284
Classifier Administration Server Guide UM644001
Style to Apply
The Style to Apply setting allow s a user to select a theme for an Office Application. A user can select
from a Microsoft Office Theme, a Classifier Theme or a Custom Theme.
Microsoft Office Theme - This will show a new style user interface with the colour scheme based
on the active Office Theme from active Office application. This only applies w hen using Microsoft
Office Applications.
Custom Theme - The user decides what colour to use for the header and description text.
3. Click OK.
4. Open up an Office application to check to see if the style was applied successfully.
p285
Classifier Administration Server Guide UM644001
p286
Classifier Administration Server Guide UM644001
Tab Placement
A user can select to place a tab on the top or on the left. It is the top or left location of the tabs on tab
pages.
Tab Placement options in the Classifier Administrator Policy User Interface Settings.
3. Click OK.
p287
Classifier Administration Server Guide UM644001
p288
Classifier Administration Server Guide UM644001
Title Colour
The custom colour for the description text in the header section of the user interface when using the
Custom Theme. A user can select a text colour for the title.
Setting the title colour for the title in the Classifier Administration Policy User Interface Settings.
Setting the Title Colour in the Classifier Administration Policy User Interface Settings.
p289
Classifier Administration Server Guide UM644001
Copy (Policy)
Delete (Policy)
p290
Classifier Administration Server Guide UM644001
Note:The usual course of action is to ensure that all users are mapped (e.g. through Group Policy
configuration) to a different Policy before deletion.
Deleting a policy.
To delete a policy:
1. Go to Labelling Configurations>Policies>(Policy)>Delete .
2. In the main column, select the Policies node and in the Policies tree, select the relevant policy.
3. In the Actions column, select Delete.
4. On the Delete Policy confirmation, it will ask the question, "Are you sure you w ant to delete
"(name of policy)," click on the Yes button. If you do not w ant to delete the policy, click on the No
button.
p291
Classifier Administration Server Guide UM644001
Note: however, that Unlock Configuration will NOT affect any policy locks, they w ill remain in effect.
To lock/unlock a policy:
Label Preview
Note: Mandatory selectors w ill not be flagged as they are defined through application specific rules and
the Label Preview context is application independent.
p292
Classifier Administration Server Guide UM644001
6. If the policy has Assisted Labelling enabled, you will see the Assisted Labelling label selection
interface relevant to that policy as per the examples in Assisted Labelling examples (excluding
favourites / mandatory).
p293
Classifier Administration Server Guide UM644001
Note: Suggested classifications are usually triggered by an appropriate ‘Check for a suggested
classification’ rule, but enabling ‘User-Driven Suggested Classification’ allows the user to trigger the
Suggested Classification manually by selecting a button from the Office Ribbon Bar or from within the
Classifier Labeller User Interface.
Note: In order for the feature to be available in a client that supports user-driven suggested
classification, the setting to ‘Allow user driven suggested classification’ needs to be enabled and
appropriate messages selected for all 3 of the possible outcomes.
.
Note: If a suggested classification check is performed manually by the user, the result of the check will
be displayed in the standard Classifier Policy Check dialog with the appropriate configured message.
Note: A ‘Check for a Suggested Classification’ rule is not required for User-Driven Suggested
Classification to function since this manual method of performing a check for suggested classification
w orks against the suggested classification configuration. Any configured ‘check for a suggested
classification’ rules w ill function as they normally would regardless of whether this feature is enabled or
not.
p294
Classifier Administration Server Guide UM644001
The message to show when a user-driven suggested classification could not be found.
The message to show when a user-driven suggested classification could not be resolved. This
typically happens w hen multiple clashing suggestions are applicable.
The message to show when a user driven suggested classification has been found.
3. When all the required settings have been selected, click OK.
Policy Label UI
Admin : Labelling Configurations {configuration} Policies
The Label Configuration defines the set of Selectors and Values available for policies. The follow ing
functions are available if the Set Selectors tab is selected to define and manage selectors in a policy:
View or change the properties of a Selector in a policy using the Edit Selector action. The properties
are grouped by tab into General, which includes the ability to replace the Caption or Tooltip defined
in the Selector library for this policy, and (Selector) Values (Values can also be accessed directly
using Selector Properties / Options action).
Make a Selector available or unavailable in the policy using Selectors in policy, and configure whether
they appear on the Ribbon or the general Label Selection dialog; and whether the Label Selection
dialog is configured to present the selectors across a number of Tabs.
Control the Selector Values available in the policy and the default value using the Selector Properties
/ options action.
Language (Policy) [Only available if Allow multiple languages is enabled - see Properties (Classifier
Administration)] allows you to switch the view to show the settings associated with a particular
Language.
When a new Policy is created it will have no Selectors assigned (unless it was established using the
Copy Policy action).
p295
Classifier Administration Server Guide UM644001
p296
Classifier Administration Server Guide UM644001
Selector Properties
The two tabs are described in:
p297
Classifier Administration Server Guide UM644001
Selector Properties
Language [Only visible if Allow multiple languages is enabled - see Properties (Classifier
Administration)]. You only need to define Language specific values if the
algorithm defined in Languages would not yield a suitable value from another
configured Language.
Choose the Language and then:
Check or un-check the Use caption from Set Selectors and/or Use ToolTip from Set
Selectors.
If un-checking enter your replacement Caption / replacement Tooltip into the text box
provided.
Click OK to complete the changes.
p298
Classifier Administration Server Guide UM644001
Available values allows you to specify w hich of the values defined for the selector are actually
available in the current policy by checking /unchecking the appropriate boxes. The initial state
(when the selector is added into the policy) is that are all values are available.
Default value allows you to specify a default value for the selector by selecting the appropriate
p299
Classifier Administration Server Guide UM644001
Use names from allows you to specify w hich of the 'Names' configured for a selector (Name,
Portion, Alternate Name, Alternate 2 and Alternate 3) is presented to the user for this policy. By
default the Names configured are used. Classifier applications will then present the relevant value
from the selected Use names from property. If there is no value configured for that property, then
Classifier w ill use the selector Name.
Show value as allows you to specify how the selector will be presented if Use Single Click with pre-
defined labels is Disabled. Three options are supported:
Text only Only the caption will be presented
Colour and text The caption and background colour will be presented
Image and text The Image and caption will be presented.
Display Style:
Display values as buttons allows you to control how the selector values appear in the Ribbon [if
a Single selection list selector is configured to appear in the Ribbon (Selectors in policy)]. The
Properties (Policy) level setting Where possible wrap buttons after provides additional control.
Display Values as a list allows you to control how the selector values appear in the ribbon [If a
multiple selection list selector is configures to appear in the ribbon (Selectors in policy)].The
Properties (Policy) level setting Where possible wrap buttons after provides additional control.
Non-Assisted Labelling Policies - For non-Assisted labelling policies, the Display values as
buttons setting is found by selecting <Policy> \ Set Selectors \ <Selector> and then choosing
Edit selector options.
Assisted Labelling Policies - For Assisted labelling policies Display selector values as buttons
should be set/unset for each instance of a single selection list selector in the Selector Sequence tree
(e.g. Select <Policy> \ Connect Selectors\ <Selector instance within the tree> and choose
Edit selector options). Setting the option via the Set selectors tab has no effect for Assisted
labelling policies.
Note: If Use Single Click with pre-defined labels is Enabled, then Use Single click with
pre-defined labels takes precedence (the Display selector values as buttons setting is
ignored).
Disabled (default) : The selector will appear in the Ribbon as a drop down list of values.
Enabled : The selector values appear as buttons in the Ribbon. Examples of the effects of this can
be found under Ribbon Bar examples, Label Selection dialog and Assisted Labelling Operation . The
Ribbon wrapping setting can be used to control the presentation of the buttons within the Ribbon.
p300
Classifier Administration Server Guide UM644001
Selected - column allows you to specify w hich of the values defined for the selector are actually
available in the current policy by checking /unchecking the appropriate boxes. The initial state
(when the selector is added into the policy) is that are all values are available.
Default - column allows you to specify zero, one or more default values for the selector by checking
/ unchecking the appropriate boxes.
Use names from - allows you to specify w hich of the 'Names' configured for a selector (Name,
Portion, Alternate Name, Alternate 2 and Alternate 3) is presented to the user for this policy. By
default the Names configured are used. Classifier applications will then present the relevant value
from the selected Use names from property. If there is no value configured for that property, then
Classifier w ill use the Selector Name.
Show value as allows you to specify how the selector will be presented. Two options are
supported:
Colour and text - The caption and background colour will be presented
Display Style:
Display selector values as buttons allows you to control how the selector values appear in the
Ribbon [if a Multiple- selection list selector is configured to appear in the Ribbon ( Selectors in
policy)].
Display Values as a list allows you to control how the selector values appear in the ribbon [If a
multiple selection list selector is configures to appear in the ribbon ( Selectors in policy)].The
Properties (Policy) level setting Where possible wrap buttons after provides additional control.
Non-Assisted Labelling policies , - For non-Assisted labelling policies, the Display selector
values as buttons setting is found by selecting <Policy> \ Set Selectors \ <Selector> and
p301
Classifier Administration Server Guide UM644001
Assisted Labelling Policies - For Assisted labelling policies Display selector values as buttons
should be set/unset for each instance of a single selection list selector in the Selector Sequence tree
(e.g. Select <Policy> \ Connect Selectors\ <Selector instance within the tree> and choose
Edit selector options). Setting the option via the Set selectors tab has no effect for Assisted
labelling policies.
Note: If Use Single Click with pre-defined labels is Enabled, then Use Single click with
pre-defined labels takes precedence (the Display selector values as buttons setting is
ignored).
Disabled (default) - Selector values displayed in the Ribbon w ill appear as check boxes.
Enabled - The selector values appear as buttons in the Ribbon. The Ribbon wrapping setting can be
used to control the presentation of the buttons within the Ribbon.
Default using a time period - allows you to define a default value relative to the current date
Default to a specific date - allows you to set a specific date as the default.
p302
Classifier Administration Server Guide UM644001
Enable auto-complete - can be Enabled so that Classifier will present previously used values that
match what the user types to assist completion of the value.
p303
Classifier Administration Server Guide UM644001
p304
Classifier Administration Server Guide UM644001
Note: This option needs to be set to on to allow users to filter selector values.
Note: Only applies to single selection list selector or a multi selection list selectors when the display
style is set to display values as a list.
The "Allow Users to filter selector values" option w hich allows users to filter selector values.
p305
Classifier Administration Server Guide UM644001
2. Select a set single selection or multi selection selector from the list.
3. Select Edit Properties.
4. Select the Options tab.
5. Select the checkbox, "Allow users to filter selector values" .
6. To save click on the OK button. To cancel the action, click on the Cancel button.
Selectors in policy
1. Select the Policies node and select the relevant policy in the Policies tree. Select the Set
Selectors Tab.
2. Choose Selectors in policy which will display a list of Selectors that are currently included in /
excluded from the policy.
Selectors in Policy w ith Available selectors and Selectors in Policy (Selector Name, Tab, Ribbon and
Retained).
Note: You cannot Remove a Selector from a policy if the policy has rules configured that
p306
Classifier Administration Server Guide UM644001
5. The policy summary list will be updated to show the updated list of Selectors in the policy.
6. You can use the Ribbon and / or Tabs options to control how label selection appears to the user.
Ribbon
Classifier Label button or dialog box launcher if Single Click operation is active.
Checking the Ribbon box for a selector means that it will appear in the Ribbon Bar as well as the
general label selection dialog.
Tabs
p307
Classifier Administration Server Guide UM644001
You may wish to 'group' the selectors to reflect their usage. This can be achieved using the Tabs facility.
You can define one or more Tabs, and configure the Name of the Tab, and then which selectors appear
on each Tab.
Note: If you allocate one selector to a Tab, you must allocate all selectors to one of the Tabs; failure to
do this will result in a warning.
p308
Classifier Administration Server Guide UM644001
Tabs configuration
Set the name for the Tab (double click to get an edit dialog, and use New to add any
additional Tabs you require. The example shows three Tabs established:
Three tabs
Click OK. You can now allocate the selectors to the available tabs by choosing the Tab for
each selector via the Tab drop dow n in the Selectors in policy dialog:
p309
Classifier Administration Server Guide UM644001
Configure Tab
The policy summary view is modified to show the Tab / selectors relationship:
p310
Classifier Administration Server Guide UM644001
Nature mandatory
p311
Classifier Administration Server Guide UM644001
Retained
Admin : Labelling Configurations {configuration} Policies {policy}/[Set
Selectors]/{selector}->Selectors in policy -> Retained
You may configure Selectors that are not available in all policies. Any Selector that is not available in
a policy is a potential Retained Selector for that policy.
If an email message or document is received containing a Selector value that is recognised in the
selector library, the value is presented if the selector is included in a Marking Format, even if it is not
related to an Active selector. If you use an existing label containing such a (non-active) selector value
as the basis for a new object (e.g. Reply to a received email message) the label value will be dropped
from the new label.
There may be circumstances where the label value received has been established under a different
policy (different group of users) and this value is to be retained as the value in the 'reply to' or
'forward' circumstance. Classifier caters for This requirement can be catered for in Classifier by adding
a selector into a policy and then designating it as Retained, which will ensure that the source label
value is propagated to the new object.
Another scenario is if a selector is no longer to be included in an active capacity, but the selector
settings are to be retained in rules in the policy.
Your Marking Formats may include such Retained Selectors so that Summary Markings would still
show any defined value. By default non-Active selectors are NOT propagated to new Documents or
email messages. You can modify this behaviour as follow s:
p312
Classifier Administration Server Guide UM644001
5. Any selector that is not in use in the policy can be marked as being a ‘Retained’ selector by selecting
the appropriate checkbox.
6. Click OK to commit the changes.
Language (Policy)
p313
Classifier Administration Server Guide UM644001
Connect Selectors
All the standard policy management features apply, including defining the selectors and values that are
available in the policy (e.g. Selectors in policy and Edit Selector ). The only difference is that the
Connect Selectors Tab allows you to construct a dependency tree.
Note: Until you start to populate the Selector Sequence Tree, the effects of using the policy may be
indeterminate in terms of any label selection presented, default values and rule operation.
You start to build the Selector Sequence tree by adding one Selector at the root. This selector is the
user's first choice. You can limit the selector values available using Edit selector Options. The tree shows
Selectors and Selector values.
There are some fundamental constraints:
The Selector Order defined in the Configuration is strictly enforced. Therefore if one branch of the
tree adds the third selector defined below a value for the first selector (essentially omitting the
second selector), the second selector cannot then be added further dow n.
You cannot add a selector below a Multiple selection list value.
Mandatory selector rules that demand a value for a selector that is not visible under certain
circumstances - should be avoided, because the associated rule w ill always fail.
The default values defined in the policy selectors are ignored in the Assisted Label connected
selectors. Only default values configured in the connected selector are visible in the client.
The actions available for managing the Selector Sequence tree are:
Add a selector
Remove selector
Edit selector options - includes the ability to set the default value for this branch of the tree.
The Assisted Labelling Examples topic describes some different uses of Assisted Labelling; the
associated configuration of the Selector Sequence tree and gives examples of the user experience.
p314
Classifier Administration Server Guide UM644001
Add a selector
Add a selector
Select the appropriate selector and Click Add.
The selector is added to the tree below the chosen node. In this example, Department has
been added below the Root.
p315
Classifier Administration Server Guide UM644001
Remove selector
p316
Classifier Administration Server Guide UM644001
Click Yes and the chosen Selector will be removed from the tree.
Note: The default values defined in the policy selectors are ignored in the Assisted Label connected
selectors. Only default values configured in the connected selector are visible in the client.
1. Go to Labelling Configurations>{configuration}>Policies>{policy}/[Connect
Selectors]>{Selector}->Edit selector options.
2. Select the Policies node and in the Policies tree, select the relevant policy.
3. Select the Connect Selectors Tab.
4. Select either the Selector or one value of the Selector whose values are to be edited. Select
either Single Select or Multi Select.
5. Choose Edit selector options. This will present the properties associated w ith the relevant
selector.
p317
Classifier Administration Server Guide UM644001
p318
Classifier Administration Server Guide UM644001
7. Select the Options tab, The options w ill vary with the type of selector.
8. Adjust the set of available values by checking/un-checking the appropriate boxes.
9. Set / unset the Default value as required. This default applies only to this branch of the tree.
10. Set the Use names from value to an attribute of the Selector. The default is to use the Name
attribute.
11. Display Style: Select the Display style ( Display values as buttons / Display values as a list ).
For Assisted labelling policies Display values as buttons should be set/unset for each instance of a
single selection list selector in the Selector Sequence tree (e.g. Select <Policy> \ Connect Selectors\
<Selector instance in the tree> and choose Edit selector options). Setting the option via the Set
selectors tab has no effect for Assisted labelling policies.
Display values as buttons allows you to control how the selector values appear in the Ribbon bar
[if a Single selection list selector is configured to
appear in the Ribbon bar (Selectors in policy)]. The Properties (Policy) level setting Where possible
wrap buttons after provides additional control. Also see Multiple selection list. Single select
and Multi select selectors can select how values are displayed, Text, Colours and Text, Images and
Text, Check Boxes or Buttons.
Display Values as a list allows you to control how the selector values appear in the ribbon bar [If
a multiple selection list selector is configures to appear in the ribbon bar ( Selectors in
policy)].The Properties (Policy) level setting Where possible wrap buttons after provides additional
control.
Checked - The selector values w ill appear as buttons and the Properties (Policy) level setting Where
p319
Classifier Administration Server Guide UM644001
12. Checkboxes:
Retain Selection if valid when parent selection changes (Set/unset) on each selector node in
the Connect Selectors tree. This setting has the following effect, by default (Disabled), if
the user changes the choice of a parent selector value, any choice of subordinate value(s) must be
made afresh. If the setting is Enabled then changing the choice of a parent value will
Retain any currently selected subordinate values that are available under the new
parent choice. Consider the scenario described in Example 1 - Categories with many Annotations :
The user could select Cat 3 + A1/A2. Subsequently selecting Cat 1 would by default (
Disabled) drop A1/A2, but enabling Retain Selection on the Annotation node below Cat 1
would remember A1.
Always include this selector's values when the parent has multiple selections is only
applicable to Multiple selection selectors. Consider two multiple selection lists Make (a list of
manufacturers) and Models (a list of the models available for each manufacturer) established as
assisted labelling tree (Models below Make). The user selects Make A + models A1, A2 and A4,
and Make C w ith Models C5 and C8. Enabling the setting on each Model branch w ill ensure that the
label constructed w ill include all selected Makes and Models (Makes A + C / Models A1 + A2 + A4 +
C5 + C8).
Allow users to filter selector values - Users can filter selector values.
p320
Classifier Administration Server Guide UM644001
Define all the Annotation values (e.g. A1, A2, A3, .....)
Define the matrix of valid combinations:
Category Annotation
Cat 1 A1
A3
Cat 3 A1
A2
A4
... ...
Configure the two Selectors ( Category and Annotation) and configure the full set of values
for each.
Create a Policy and add both Selectors into the policy.
[In preparation for Example 2, add a third selector Visual Markings with values Yes and
No, and add this into the Policy]
Check that the Policy works and that the selectors and values are all available.
Set Use assisted labelling on the policy.
Select the policy, and select the Connect Selectors Tab.
Select the Root node and choose Add a selector. Select Category and click Add.
Expand the tree to show the Category values.
Select Cat 1, choose Add a selector. Select Annotation and click Add. Repeat the process
for Cat 3, etc.
Note: Cat 2 is omitted from the preceding step as the table at the start indicates it has no
associated Annotation value.
Under Cat 1 select Annotation and choose Edit selector options. Ensure that only the
appropriate Annotations ( A1 and A3) are selected (uncheck all others). Set a default if
appropriate.
Repeat the process for the other Category values (Cat 3 etc).
The example below shows how the tree would look for the Cat 1 /2/3:
p321
Classifier Administration Server Guide UM644001
Cat 2 selected
Selecting Cat 3 w ill add the Annotation selector to the display and present the configured Annotation
values.
p322
Classifier Administration Server Guide UM644001
p323
Classifier Administration Server Guide UM644001
This example assumes the previous example ( Example 1 Categories with many Annotations ) has been
configured as its starting point.
In the previous example, Cat 2 might have no annotations because it relates to externally consumable
information where the annotations would have no meaning. The organisation wishes to give users
further control if they select Cat 2 value over the applicability of Visible Markings (Header / Footer /
Flot etc.) to such information (documents and messages). Assisted Labelling allows you to define
different rules that only take effect based on a user choice.
This might be achieved as follow s using the Selector in the Configuration called Visual Markings with
two values (Yes and No).
Select the Connect Selectors Tab. Expand the tree.
Select the Cat 2 node and choose Add a selector. Select Visual Markings and click Add.
Select Visual Markings in the tree and choose Edit selector options.
Set the default value to Yes.
Selecting Cat 2 w ill show the Visual Markings selector with Yes and the default and No as the other
choice.
p324
Classifier Administration Server Guide UM644001
p325
Classifier Administration Server Guide UM644001
Nature of Information
p326
Classifier Administration Server Guide UM644001
Both Classification and Department are immediately below Corporate which means that both
selectors will appear when Nature = Corporate.
Select Nature and choose Edit selector options. Set the default to Corporate.
The user experience is different under Microsoft Office and OWA as per the following:
Office Classifier
Initially the Classifier label shows the default Nature = Corporate with the Classification and
Department selectors available for selection.
Suggested Classifications
Admin : Labelling Configurations {configuration} Policies {policy} [Suggested
Classifications]
Note: Suggested Classifications are only supported by Microsoft Outlook, Word, Excel, PowerPoint,
Project and Visio applications.
This feature allow s you to define one or more Suggested Classifications for a policy. These can then be
referenced in Check for suggested classification rules such that when a document is saved or printed, or
a message is sent the Suggested Classifications are evaluated and the appropriate action is performed.
Each Suggested Classification has one or more Conditions defined (stored in the Condition Library), and
Selector settings that indicate either selector value(s) to be applied, and/or that a selector should be
cleared.
Note: Currently, suggested classifications are only triggered if you enable the ‘check for a suggested
classification and automatically apply’ rule. This change will allow the user trigger the Suggested
Classification manually by selecting a button from the Ribbon Bar or from w ithin the Labeller UI.
Note: If you run the suggested classification manually, the suggested label w ill automatically be
calculated and show n in the Policy Check dialog. If we fail to suggest a label, a message box would be
displayed to inform the user, e.g. "Document was set to the suggested classification" / "Unable to
determine a Classification for the document".
Note: If you as the Admin have enabled the original ‘check for a suggested classification’ rule and
this new manual option w as also enabled, then both w ill apply. So even if the user manually triggered
the suggest label, w hen they save, send or print the document, the rules will also be triggered, including
the ‘check for a suggested classification and automatically apply ’ rule.
p327
Classifier Administration Server Guide UM644001
Note: This manual option w ill only be applicable to the outer labeller UI, i.e. not the inner labeller UI
w hich can be launched from w ithin the Policy Check dialog.
Note: Policy Dialog Summary label button w ill be disabled when displayed from a Use Suggested
manual operation to avoid looping.
Suggested Classifications.
p328
Classifier Administration Server Guide UM644001
the "Automatically apply when possible " then both will apply.
p329
Classifier Administration Server Guide UM644001
Sensitivity - Unmarked/Sensitive/Commercial-In-Confidence
Distribution - Internal/External
Edit Classification
p330
Classifier Administration Server Guide UM644001
A user can edit the properties of a Suggested Classification and select the label elements that will be
included or excluded. There is an option to automatically apply conditions that must be satisfied in order
for the label to be applied and to choose the message that will be displayed when the Suggested
Classification cannot be applied.
Essentially, the same dialog and operation is presented w hen you Add a new Classification.
New Classification.
p331
Classifier Administration Server Guide UM644001
Sensitivity - Unmarked/Sensitive/Commercial-In-Confidence
Distribution - Internal/External
p332
Classifier Administration Server Guide UM644001
p333
Classifier Administration Server Guide UM644001
Note: If Enabled, the policy check result w ill display a checkbox to allow the user to 'Don't show this
warning again.'
Note: This check only applies to Microsoft Office Documents, it is not applicable for Outlook.
p334
Classifier Administration Server Guide UM644001
To enable a rule:
p335
Classifier Administration Server Guide UM644001
1. Select Policies and select the relevant 'policy' and select the Default Label tab.
2. Choose Add a new Default Label . This will present essentially the same dialog as Properties
(Default Label):
3. Specify a unique Default Label Name. The name is used w hen configuring a SharePoint Library
default label.
4. Click on the Classification button and select the required values from the Classifier Label dialog
presented.
5. Click on the Conditions button if you want to associate conditions with the Default label. When
used in conjunction w ith the Intelligent Defaults feature, the Default label values will be used when
deriving the Intelligent Default if the conditions match.
6. Click Ok to complete the process.
7. The summary list of Default Labels is updated.
p336
Classifier Administration Server Guide UM644001
1. Select Policies and select the relevant 'policy' and select the Default Label tab. Select the
relevant Default Label.
2. Choose Properties. Any Property may be modified.
Essentially the same dialog and operation is presented when you Add new Default Label.
1. Select Policies and select the relevant 'policy' and select the Default Label tab. Select the
relevant Default Label.
2. Choose Delete - a confirmation dialog is presented. Click OK to complete the deletion.
Note: Classifier Administration has no way of know ing whether a 'Default Label' item has been used
w ithin SharePoint, so all deletions are allowed. If you delete a Default Label entry, then it will disappear
from the Configuration and SharePoint will not be able to apply any action that referenced that Default
Label Name.
Rules Management
Admin : Labelling Configurations {configuration} Policies {policy}
Classifier uses Rules to control the operations performed by individual applications. Each rule applies to
a single application. It is only the effect of Rules that end users see; the Rule definitions are purely a
matter for Administrators.
Rules apply to a single Policy. If you need to support multiple policies using similar rules it may be
useful to establish the first Policy and then use the Copy (Policy) mechanism to establish initial rules for
the second Policy that may then be edited to achieve the required effects.
This section describes the general Rule administration mechanisms illustrated by a few specific
examples. The set of Rules supported varies across individual applications. The complete list of rules
supported by the various applications can be found in Rules supported. The rules supported fall into
three general types:
Check rules that check some aspect of site policy and involve the user if the policy is contravened.
The general Rule management topics available are (knowledge of these is assumed in the Rules
supported section and its sub-topics):
What is a rule?
Set Rules tab, which provides access to the Rules Management functions .
Add a rule
p337
Classifier Administration Server Guide UM644001
Edit (Rule)
Delete (Rule)
Copy (Rule)
What is a Rule?
p338
Classifier Administration Server Guide UM644001
Each rule is application specific, but the administration interface allows you to create
(common) rules for multiple applications
Action This is the action to be performed by the application if the Label condition applies.
Actions may require additional configurable parameters (Rule Options) to define their
effects. Rules fall into three broad groups:
Rules that add Visual or Meta data . These rules allow you to add a Marking to a
Location using a Marking Format to the existing information. E.g.
o Add a header here to any existing text in this format (documents)
Rules that perform policy checks . These rules allow you to check various aspects
of a user's actions against your site policy, and to alert the user if the policy check
fails. E.g.
o Check these mandatory selectors. Warn user if check fails with this
message. (All applications)
o Check number of recipients does not exceed number . Warn user if check
fails with this message. (Outlook and OW A)
Rule options Zero, one or two Rule options that supply any variable aspects of the rule such as those
highlighted in the Action examples above.
Label value This defines the label value(s) to which the rule applies. When a rule is created you
choose at the outset whether it applies Always (i.e. regardless of the current label
value); when there is specifically No Label selected; to Any label (i.e. there is a label
value but specific settings are not relevant); or to a specific configurable label value .
Prerequisite conditions These are optional and are not applicable to OWA rules. Prerequisite
conditions may be defined such that the rule is only applicable if the prerequisite
conditions are satisfied. It is possible to define two rules for the same application at the
same point in the rules tree. This potential conflict is resolved by the rule highest up the
tree taking preference (see Rule Up / Down).
All Rules are managed through the Set Rules Tab which is available once you have selected the relevant
policy.
You can define multiple rules as described in Adding Rules. This may lead to situations where more than
one rule could apply to a single application and action. Classifier decides rule precedence as described
in Rule Overlap handling.
Note: New versions of Classifier Administration may provide 'new ' rules which although quite similar to
an existing rule, provide additional features in such a way that they must be treated as a brand new rule
that supersedes the existing rule type. In such circumstances, existing rules will continue to operate,
but cannot be edited through Classifier Administration. To take advantage of the new facilities you must
establish a brand new rule; modify the configuration to make use of that new rule, and deleted the
original rule.
p339
Classifier Administration Server Guide UM644001
.
Rules tree
The top part of this display shows a tree structure view that presents all the current Rules.
The bottom part of the display show s a summary list of the Rules applicable to the node selected in the
top part. Selecting the Always node w ill show all the rules associated with that in the lower half of the
display.
p340
Classifier Administration Server Guide UM644001
Add a rule
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule
Rules can only be added when the Set Rules Tab is selected. To define a new rule for a policy:
Select the Policies node, and select the relevant policy.
Select Set Rules Tab and select the relevant node in the Rules label tree.
If you want to:
- Add a rule that applies regardless of whether a Label value is defined or not then select
Always.
- Add a rule that applies only if there is no label value then select No Label.
- Add a rule that applies if any label value is defined (not blank) then select Any label.
- Otherwise select a node corresponding to label value in the label tree . The example
below shows Classification selected, so adding a rule here would apply if there was any
Classification value selected.
p341
Classifier Administration Server Guide UM644001
Add a rule
Choose Add a Rule. This will launch the Rule wizard which operates as described in Rules
Wizard operation. The wizard is aw are of whether you have chosen All Labels or a specific
label value and tailors its operation appropriately. Selecting a node in the Label structure
tree (e.g. Sensitivity = Confidential) and then selecting Add a rule with a specific label
value selected assumes that you want a rule dependent on that Label Value and adopts the
selected label value as the initial value for the Label condition. You may modify this during
the wizard sequence.
Note: Certain rule types (Label Change Check, Mandatory Selector Check, Selector Expiry
Check and Content Check) provide a setting (Allow multiple rules of this type) which
influences the duplicate rules checking.
If you inadvertently add a duplicate rule at the same point in the rule tree, the w izard will
w arn you, but will establish the new rule. However, a rule with prerequisites defined is not a
duplicate of a rule without prerequisites defined. The following shows an example of a
duplicate rules dialog:
Rule Conflict
p342
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule
This topic describes how new rules can be added.
Note: The full set of Rule Templates supported by each of the various Classifier applications and all the
associated settings is defined in Rules supported.
Invoking Add a Rule starts a wizard.
You can go forward and backwards through the wizard ( Next / Back), or Cancel the
sequence at any time. Only if you click Finish at the end of the sequence will the changes
be finalised.
A list of applications is presented (Outlook Emails, Outlook Web Emails, Word documents,
etc. depending upon your licence).
Choose Application
Choose the application(s) to which this rule will apply.
An Action choice screen is presented listing the Rule templates relevant to your chosen
application(s). If you select multiple applications, the list will only show those rules that are
common all the applications selected. If the list is empty, there are no rules common to the
chosen applications.
By default the list show s all the rules relevant to your chosen applications. You can filter this
list to show only the Add, Apply or Check rules.
The example below shows the general layout of the dialog presented for Word:
p343
Classifier Administration Server Guide UM644001
p344
Classifier Administration Server Guide UM644001
configuration dialog.
If you are creating or modifying a rule that is Label value specific, the currently defined label
value is presented as one of these placeholders. Click on the current label value
placeholder to modify the label setting ( "Selector" = "Classification" in the example
above). This is described fully in Defining Label Conditions .
Other examples of configurable features are Message Format names, Action choices,
S/MIME security level, RMS policy selection and W arning level configuration.
Note: The full set of Rule Templates supported by each of the various Classifier applications
and all the associated settings is defined in Rules supported.
Prerequisite Conditions
You can choose from the currently defined conditions, or click New to Add a new condition.
Once you have finished making changes, select OK and the new rule is added to the Rule
tree.
Rule Icons
p345
Classifier Administration Server Guide UM644001
Rule unavailable A rule that is not available under the licence you currently have applied.
The rule is greyed out, and no actions are available.
Rule Deprecated A rule that was created using a previous version of Classifier
Administration, and that is no longer supported. The rule is greyed out, will
have no effect and the only action supported is Delete.
Edit (Rule)
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Edit
rule
Note: Although you can establish a (common) rule for more than one application at a time, you must
subsequently edit those rules individually.
Existing Rules may be edited.
To edit a rule:
Edit a rule
3. Select Edit Rule. This will launch the Edit Rule dialog which operates as described in Rules Wizard
operation. The wizard is aw are of the rule you have selected and uses this to set initial values for
the rule.
4. You may change various aspects of the rule. You CANNOT move rules between the primary nodes
in the rule tree other than by a suitable copy / paste / rename sequence. You can modify a specific
p346
Classifier Administration Server Guide UM644001
label condition as long as the change would not cause the rule to move between the primary nodes
in the tree.
5. Amend settings as required.
6. Once all changes have been made proceed to the end and click on the OK button.
Delete (Rule)
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Delete
rule
Rules may be deleted at any time.
Select the Policies node, and select the relevant policy. Select the Set Rules Tab.
Expand the Rules tree to display the relevant rule. Select the relevant Rule.
Choose Delete Rule.
Click OK on the delete confirmation.
The Rules tree is updated accordingly.
Copy (Rule)
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Copy
rule
You can use an existing rule as the basis for a new rule. The new rule will be given a name derived from
the source Rule w ith a unique suffix, such as (1), added at the end.
The new rule will have configurable features added or removed to ensure it complies with the
destination in the rule tree. Thus you can copy a rule from below the No Label node and paste it below
a specific Label value. For example if the source is a "For emails..." rule and the destination is under a
specific label (e.g. Classification Selector) then the new rule will adopt the target Label value as its
starting point.
To use an existing Rule as a template for a new rule:
Select the Policies node, and select the relevant policy. Select the Set Rules Tab.
Select the relevant source Rule in the Rule tree (Outlook apply FLOT in the example below).
p347
Classifier Administration Server Guide UM644001
p348
Classifier Administration Server Guide UM644001
p349
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
When you define a Rule that includes a label condition (e.g. “For documents with this label, add a
w atermark in this format”), the Rule Wizard presents you with a dialog (when you select the label
condition placeholder) that allow s you to define the label matching criteria for the available Selectors.
The initial Selections w ill reflect the location in the Rule tree that you chose to add the rule.
p350
Classifier Administration Server Guide UM644001
Always
No Label
Any Label
Further nodes under Any Label corresponding to the specific defined Label condition.
More than one rule affecting the same location may be defined in the overall Rule tree. Classifier uses
the following algorithm to determine the Rule to apply w here more than one rule might apply:
Always rules only apply if there is no other similar Rule that takes precedence, including < No label>
rules.
[A similar rule would be one that affects the same location (e.g. FLOT). Note that you could have
multiple rules applying for X-Header / document property etc. from different branches of the Rule tree
as long as they are for different X-Header / document property values].
No Label rules only apply if there is no label value selected. It is mutually exclusive with < Any Label>
rules, with <Label condition> rules, and with <Always> rules.
Any Label rules only apply if a label value has been selected and there is no other similar Rule with a
specific label condition that also applies – i.e. there is no other applicable rule further dow n the tree.
A <specific selector value > defined in a rule makes a 'better' match in the label matching algorithm
than <Any> that is in turn 'better' than a <Not Relevant>, that in turn is better than an <Always>
match.
For Multiple selection lists, the value at the head of the list is treated as the least significant and the
value at the bottom of the list is treated as the most significant. Consider a Multiple selection list having
three values V1, V2 and V3; and rules R1, R2 and R3 that apply Markings M1, M2 and M3 associated
w ith each of those selector values. If the user select values V1 + V3, there are two applicable rules (R1
and R3) - Classifier uses the list order to determine rule precedence (bottom of list is most significant)
and Rule R3 / M3 will be applied.
Example scenario:
Consider a scenario where you want three different FLOT Markings depending upon the label value:
p351
Classifier Administration Server Guide UM644001
A more complex example of rule overlap handling is explored in the Appendix - Example of ‘Best
matching Rule’ algorithm .
Note: Duplicate rules are rules that affect the same application location AND have the same label
condition. Classifier Administration flags such duplicates at appropriate times, and you should address
such anomalies by removing one of the duplicate rules.
Note: Certain rule types (Label Change Check, Mandatory Selector Check, Selector Expiry Check and
Content Check) provide a setting (Allow multiple rules of this type) which influences the duplicate rules
checking.
Rules supported
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules]
This section covers all the rules supported by Classifier applications. Rules are application specific but
may vary according to the Classifier policy in use. The Application Rule support table below shows
the rules presented for each application. Rules for an application are only available if the relevant
licence has been applied.
In the table below , x.y (e.g. 3.5) indicates a feature that is new in that version of Classifier
Administration. Application versions prior to that number do not support the feature (Classifier 1.3
(which preceded 3.4) is assumed as the baseline).
Note: Component release notes may document limitations that apply even if the table below indicates
support for a feature.
The rules are grouped into the rule categories (topics) show n in the table:
Add rules - Rules that add a marking or meta-data to the document or message.
Check rules - Rules that check that the policy (as defined by these rules) is being follow ed.
You may define multiple instances of each type of rule and may set pre-requisite Conditions. Multiple
instances of a rule may be associated w ith a single label value as long as different conditions apply to
each rule (e.g. Insert a different FLOT if there is an attachment). Classifier determines which rule to
apply based on the ‘best fit’ between the run time label and the label values associated with the rule as
described in Rule Overlap Handling.
Details on the individual rules can be found by following the links above.
p352
Classifier Administration Server Guide UM644001
Add rules
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Office, Email, OWA, Mail Add-in, Notes and Mobile Classifier allow Markings and/or Metadata based on
the current label value to be applied to the current document / message. One common use is to
facilitate recognition by software and users that the email message is labelled, and the value of that
label.
Any Marking defined through these mechanisms overwrites any existing value in the same location
defined by any other means (e.g. the user).
Note: Any rich text formatting specified in a Format is ignored when used in a location that does not
support such features (e.g. Subject field).
Note: If your site uses Word templates to set Header/Footers etc. you may find that Insert Marking as
Field Code (Word only) is more appropriate for Word than some of the rules below .
Separate rules appear for each supported “Location”. For each Location rules are available in a general
(Add ...) or a Label specific (W ith this <Label>, add .....) form depending on whether you are adding
the rule as an Any label or a rule associated with a specific label value.
Application Rule support
The table below indicates the rules supported by each application [OL (Outlook) / O(WA) / Notes / Mob /
M(ailAdd-in) / W(ord) / Ex(cel) / PP(Pow erPoint) / Pr(oject) / V(isio) / CAD / SP / F(ile)/DCS/ Box
indicates that the application supports the setting].
Marking / metadata Outl'k OWA Mail Notes Mob Word Ex'l P'Point Project CAD S'Point DCS
Add-i Visio File Cl
n Box
Add a FLOT OL OWA 3.10.0 Notes Mob
Add a LLOT OL OWA 3.10.0 Notes Mob
Add to Subject here OL OWA 3.10.0 Notes Mob
Add this X-Header OL OWA 3.10.0 Notes 3.7.4
Add attachment list OL OWA 3.10.0 Notes
(Attachment list format) OL OWA Notes
Add these addresses OL OWA
Add this Outlook item propety OL
Add a Textbox on the header W
Add a Textbox on the footer W
Add a textbox on the top PP
Add a textbox on the bottom PP
Add a textbox to top of page V
Add a textbox to bottom of V
page
Add a cover page marking W Ex PP V
Add a header here W
Different 1st page W
Different odd/even pages W
Add a header Ex Pr + V CAD
Different 1st page Ex
Different odd/even pages Ex
Ex
Smart selection
PP
With alignment
Add a footer here W
Different 1st page W
Different odd/even pages W
Add a footer Ex Pr + V
Different 1st page Ex
Different odd/even pages Ex
Ex
Smart selection
PP
With alignment
Add an image into header OL W Ex PP
Add an image into footer W Ex PP
p353
Classifier Administration Server Guide UM644001
Note: In the table below , Mail Add-in (3.10.0) only supports messages (not meeting requests for
example).
Add to subject
here in this
format.
Note: Only
supported for
messages and
meeting requests.
Note: A Reply/
Forward operation
w ill check for any
existing
recognisable (Basic this format selection dialog above)
Subject marking
and strip if found
before applying a
Subject marking
appropriate to the
current label.
p354
Classifier Administration Server Guide UM644001
Note: Email
Classifier may
truncate the
original subject to
accommodate the
Prefix / Suffix.
Note that if the
Prefix or Suffix is
itself longer than
the maximum
subject length,
then the Prefix /
Suffix is not
included in the
updated Subject
value.
p355
Classifier Administration Server Guide UM644001
Add these
addresses to
these recipients
(Not supported
by Notes
Classifier or
Mobile Classifier
and not
supported for
Tasks)
Note: The addition
of recipients is
performed after
any recipient type
checks.
For documents:
p356
Classifier Administration Server Guide UM644001
Add a Textbox on
the header in this
format
Add a Textbox on
the footer in this
format
(Word only)
When a TextBox
has been inserted
via the rule, the
text is formatted
according to the
defined Marking
Format. The user
is free to
manipulate the
Textbox (e.g.
move it, format it
etc).
When the rules
run, if an existing Word Textbox in header or footer
Classifier 'TextBox'
exists in the
header/footer only
the text (field
code) is updated,
thus any
customisations
made by the user
to the box will
remain, and the
alignment applied
from the original
marking format is
retained regardless
of alignments of
marking formats
associated with
subsequent rules
applied (e.g. due
to label change).
This means that
any changes made
by the user to the
text content (e.g.
font, colour, size,
etc.) will be lost
the next time the
rule fires.
For Word: This
behaviour is (Presented when Options above is pressed)
modified if the
Marking Format Word Add Textbox settings
has 'Use Plain
Text' specified. In
this case Classifier
w ill simply replace
the text content,
but leave any
surrounding
formatting
unchanged. (Note
that any
formatting set by
p357
Classifier Administration Server Guide UM644001
p358
Classifier Administration Server Guide UM644001
rule fires.
Add a header in (For most applications - Basic this format selection dialog above)
this format
(For Excel - only the follow ing:)
(Supported by
Excel, Project,
Visio and
AutoCAD)
Add a footer in
this format
(Supported by
Excel, Project,
Visio)
For Excel, you can
choose Smart
Selection which
w ill cause Classifier
to add the
header/footer into
the first vacant
location found
following the order
that you define. If
there are no
vacant slots, the
marking is not
w ritten.
The other
applications always
replace any
existing text.
See also Add Excel Header/Footer placement
Header / Footer
additional notes.
p359
Classifier Administration Server Guide UM644001
(Word) This rule will apply a Text Box marking to the first page of a Word document /
Add a cover page Pow erPoint document / Excel spreadsheet (only the first spreadsheet) / Visio
marking in this drawing when the document is saved.
format to First
The first page may be a Word 'Cover Page' if one has been inserted.
Page with these
settings. The application rules supported provide control over the placement of the text box
through the settings dialog presented when the these hyperlink is clicked.
(Excel/
PowerPoint/
Visio)
Add a cover page
marking in this
format with these
settings
p360
Classifier Administration Server Guide UM644001
Note: If
documents are
protected then
Allow label change
on protected
documents may be
relevant.
Note: Under
Word, Classifier
adds an entry to
the Watermark
gallery if there is
an "Add
Watermark" rule
configured
applicable to the
current label value.
Although the user
might use this
gallery entry to
remove the current
w atermark,
Classifier will
always perform
any applicable rule
when the
document is saved.
Note: Classifier
also supports a
mutually exclusive
Add this image as
a watermark rule
to apply an image
rather than a text
w atermark.
Note: You can use
the Watermarks
use marking
format font to
control the font
used for the
Watermark.
(Word Only)
Add this image to
top of page with
this text wrapping
and this alignment
Add this image to
bottom of page
w ith this text
wrapping and this
alignment
(PowerPoint
p361
Classifier Administration Server Guide UM644001
Only)
Note: These
above can be used
alongside the
corresponding Add
a Header or Footer
rules.
p362
Classifier Administration Server Guide UM644001
p363
Classifier Administration Server Guide UM644001
>Info->Properties
(Advanced
Properties) or
similar.
Note: Office
Classifier and CAD
Classifier always
populates the
private Classifier
label Document
Property.
Multiple instances of the these rules can be defined as long as each Rule contains a different Custom /
Document Property name.
(d) Specify any Prerequisite Conditions required. Not applicable to OWA.
(e) Complete the wizard sequence by supplying a name for the rule. The name of the application
w ill automatically be pre-pended.
Note: You may subsequently edit the rule to change any of the settings (e.g. the marking format used).
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
You may configure a rule that adds an attachment list into the body of the email or web email message
(see Add rules).
The attachment list comprises the attachment names and any label value associated with each
attachment (only for attachment types supported by Classifier).
Note: Further details on how Email, OWA and Notes Classifier try to determine a label value for various
file types can be found in Appendix - Label Propagation Mechanisms .
Examples of how attachment lists appear in received messages are shown below:
p364
Classifier Administration Server Guide UM644001
p365
Classifier Administration Server Guide UM644001
Note: Office Classifier configures the Header/Footer as defined by the relevant rules, but it is the
Office application that applies the Header/Footer to the document. For example, configuring Word or
Excel rules to apply different First/Odd/Even page header/Footer will only have the desired effect if you
have also configure the document to use different First/Odd/Even page header/Footer.
Settings to Auto Enable Microsoft Office Header / Footer controls allows you to further automate control
over these features.
Note: Some applications apply limits to the size of headers/footers (including formatting control
information - font size, name and colour e.g. &"Arial,"&11&K00C000
UNMARKED&"Arial,"&11&K000000 EXTERNAL&"). If limits are exceeded, Classifier first removes
formatting information before truncating the text. Excel has a limit of 253 characters, Project has a limit
of 256 characters and Visio has a limit of 127 in each of Header/Footer Left/Right/Centre. Check that
the expected effects apply in each of your applications.
Notes for Word: Header/Footer markings cannot be added to 'form-filling' protected documents. For
documents protected in other ways Allow label change on protected documents may be relevant.
The Add a header / footer here rules allow you to defined w hether the Marking is merely inserted, or
replaces any pre-existing header / footer.
Notes for PowerPoint:
Headers - PowerPoint does not support application of headers to slides. Any Rules to apply headers will
only take effect on Notes produced by Pow erPoint.
Footers - In order to apply footers to PowerPoint presentations users must ensure that standard
PowerPoint footers are enabled on each slide via the slide masters layout.
If you need to apply formatting as gradient fill or colour to header or footer shapes, these should be
applied to the presentation using the slide master and not directly to the slide itself. Applying such
formatting directly to the header and footer may be lost if the label is changed (and not applied to the
slide master).
Copy/Paste considerations . This situation can become further confused if slides are pasted from another
presentation. Depending upon the Copy/Paste options selected (e.g. 'Use Destination Theme' or 'Keep
source formatting'), the source PPT Master/Slide settings can take effect in the target presentation.
Microsoft KB article KB913500 describes a scenario where headers and footers may become out of sync
w hen slides have been pasted from other presentations. The following link may also be useful -
http://social.msdn.microsoft.com/Forums/en-US/innovateonoffice/thread/2085dcd1-6977-4bcb-9e74-7f
1f49a83d61/ .
Notes for Visio: Visio only supports plain text modifications to headers so any rich text features
defined in the Marking format are ignored.
You can view any plain text header you have applied via File / Print / Print Preview.
Visio does not support multiple line Headers / Footers. Only the first line defined by a Marking appears.
Notes for Project: Do not create headers or footers of 256 characters or more in Project as
COMException fatal errors are likely to occur.
Notes for CAD: AutoCAD and DraftSight support the Add a Header rule, but the header only appears
w hen the design is printed, and the location of the header is an application matter.
Notes for Excel: Headers/Footers may not be displayed in Excel even when Classifier is configured to
display headers/footers in Excel. This may be because you do not have a printer configured, or you do
not have a printer set as the default. Please refer to Microsoft KB article
http://support.microsoft.com/kb/172320/en-us .
Note: To view headers and footers in Excel click the View tab then Page Layout.
p366
Classifier Administration Server Guide UM644001
Note: If the ‘allow user to remove’ option is set to true then when a rule applies then the user can
choose to remove the marking from the Options menu (under Visual Markings).
Note: The user can then ‘restore the markings’ by re-checking the appropriate item under the Options ->
Visual Markings menu.
To add a rule that allow s user control over the display of the visual markings:
Select an application or asset to w hich the rule you select will apply.
p367
Classifier Administration Server Guide UM644001
6. Add a rule that supports the " Allow user to remove" option.
7. Click on the Next button. An Edit Rule window will appear.
p368
Classifier Administration Server Guide UM644001
8. Set the appropriate options on the rule and click on the highlighted " Allow user to remove" text
and in the dropdow n menu select true to allow the user to control the visibility of the marking.
9. Click on the OK button.
p369
Classifier Administration Server Guide UM644001
10. To finish and save, click on the OK button. To not save, click on the Cancel button. The rule w ill be
updated and added to the list of Set Rules in the Applicable Rules area.
p370
Classifier Administration Server Guide UM644001
The Administrator can configure on a per rule basis whether the visual marking can be suppressed by
the user by setting the ‘Allow user to remove’ element of a visual marking rule.
If a document has visual markings whose display can be toggled by the user then they will be able to
remove/restore them via the ribbon.
The text for the menu items in the ribbon can be configured in the usual way by modifying the
appropriate default text in the `Menus` section of the User Interface Library.
Examples of FLOT
A FLOT (First Line of Text) label is inserted into the email or web email message when a Send operation
is performed. The FLOT displays a visual representation of the Label value to the recipient of the email
message.
The figures below show examples of a received email message containing a FLOT Marking.
p371
Classifier Administration Server Guide UM644001
Apply rules
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Office, Email, OWA and Notes Classifier allow settings based on the current label value to be applied to
the current document / message.
Separate rules appear for each supported “Location”. For each Location rules are available in a general
(Add ...) or a Label specific (W ith this <Label>, add .....) form depending on whether you are adding
the rule as an Any label or a rule associated with a specific label value.
Application Rule support
The table below indicates the rules supported by each application [OL (Outlook) / O(WA) / Notes / Mob /
M(ailAdd-in) / W(ord) / Ex(cel) / PP(PowerPoint) / Pr(oject) / V(isio) / CAD / SP / F(ile) / Box indicates
that the application supports the setting].
Rule Outlook OWA Mail Notes Mob Word Excel P'Point Project CAD S'Point
Add-in Visio File Cl
Box
Apply S/MIME security OL OWA
Apply this Box Classification Box
Apply this Category OL
Apply a delivery report request OL OWA
Apply a read receipt request OL OWA
Apply this importance value OL OWA
Apply this sensitivity value OL OWA
Apply this expiry value OL OWA
Apply this RMS policy or option OL W Ex PP
Apply an update to field codes W
Apply SealPath protection OL FC
Apply Seclore protection OL FC
Do this with the document Box
p372
Classifier Administration Server Guide UM644001
Choose Add a rule which starts the Rules wizard. Select the appropriate applications(s) and
click Next. This will present the rules available for the application(s) chosen. If required,
choose the appropriate rule category filter (Add/Apply/Check rules).
Select the appropriate 'Apply ...’ rule from the list of rules displayed. This will present the
appropriate rule edit template.
If the rule is label value based then select the label value token and configure the label
setting to meet your requirements.
(b) Set any rule specific settings - see Apply rules - descriptions .
(c) Specify any Prerequisite Conditions required (Not applicable to OWA).
(d) Click OK and Next on the edit template dialog and c omplete the wizard sequence by supplying
a name for the rule. The name of the application w ill automatically be pre-pended.
Note: You may subsequently edit the rule to change any of the settings (e.g. the marking format used).
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
This topic provides Apply rule specific information.
For emails only: Dialog presented w hen theplaceholder is selected
Apply S/MIME security to the message using Sign
Only
(Not supported by Notes or Mobile Classifier)
This rule allows you to request that S/MIME
security be applied w hen the message is sent
Note : Any label value included in the body (e.g.
FLOT) is protected. A label value included as an
X-Header or Subject value is outside the data
protected by signing/encrypting the email
message.
Apply this Category
(Not supported by Notes or Mobile Classifier)
This rule allows you to request that a named
Outlook Category be applied w hen the message is
sent.
Note: Categories are stripped from messages
once they reach the message store - i.e. a
recipient will not see the Category that w as set.
p373
Classifier Administration Server Guide UM644001
Apply SealPath protection. Warn user if check fails There are no rule specific settings.
w ith this message
To define the action to take if for some reason the Sealpath
(Only supported by Email Classifier and File protection cannot be applied, assign the required Warn
Classifier) user and this message settings as described in Warn /
Prevent / Audit / Challenge options for Check rules.
This rule causes the current Label information to
be passed to SealPath (via an API) w hich
determines the appropriate RMS policy and applies
that policy. The warn/prevent dialog w ill appear if
for some reason that call to SealPath fails.
Apply Seclore protection. Warn user if check fails There are no rule specific settings.
w ith this message
To define the action to take if for some reason the Seclore
(Only supported by Email Classifier and File protection cannot be applied, assign the required Warn
Classifier) user and this message settings as described in Warn /
Prevent / Audit / Challenge options for Check rules.
This rule causes the current Label information to
be passed to Seclore (via an API) w hich
determines the appropriate RMS policy and applies
that policy. The warn/prevent dialog w ill appear if
for some reason that call to Seclore fails.
p374
Classifier Administration Server Guide UM644001
p375
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: The Apply RMS policy feature is only available if your site has an RMS (Microsoft Window s Rights
Management Services) environment configured.
Note: Ensure that all clients are configured to use the RMS policies you have deployed before trying
Office Classifier integration. If you can apply an RMS policy from Word, Excel, Outlook, and PowerPoint
manually then the Office Classifier integration features should function.
Note: A user may view their RMS permissions through the usual RMS View permissions action.
Note: If the configured RMS template can't be enabled for some reason, then the current action (e.g.
email message submission) is blocked.
Note: All RMS templates should allow programmatic access to email contents. Otherwise, issues may
arise when Outlook tries to reply to or forward a received message. For example, FLOT, LLOT and
Attachment block may not be as expected because the content of the message cannot be processed by
Classifier. [Check that the user has Access the message programmatically RMS permission set to
Yes.]
Note: Classifier Administration queries the AD RMS Service Configuration point specified in AD and
connects to the AD RMS management w eb service to query the list of templates. If the web service is
accessible the RMS combo box is populated with a list of templates.
Note: Additional considerations apply if you are using Azure RMS as documented in Azure RMS support.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
The following applies if you are using Azure RMS:
Classifier does not currently support Managed (Department) templates.
Classifier Administration and Email and Office Classifier need to know how to located the Azure RMS
templates.
1. Ascertain the required location using the Get-AadrmConfiguration PowerShell administration tool
and noting the value associated with LicensingExtranetDistributionPointUrl .
Get-AadrmConfiguration
2. Set the follow ing registry entry to enable Classifier Administration to find the policy values to be
presented when configuring an Apply RMS policy rule:
HKLM\Software\Wow6432Node\Microsoft\MSDRM\ServiceLocation\EnterprisePublishing
(REG_SZ) default value: <http(or https)://RMS_Cluster_Name/_wmcs/Licensing> .
(See AD RMS Service Discovery under https://technet.microsoft.com/en-us/library/dd772753
(v=ws.10).aspx for related information.)
3. Classifier w ill first look for Azure templates under %LocalAppData%\Microsoft\DRM
\Templates.
If none are found it w ill check the location configured under one of the following:
HKCU\Software\Policies\Microsoft\Office\15.0\Common\DRM\AdminTemplatePath
p376
Classifier Administration Server Guide UM644001
HKCU\Software\Microsoft\O ffice\15.0\Common\DRM\AdminTemplatePath
w hich should contain an expandable string that points to the file store where the admin templates
are kept.
Check rules
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
The Configuration can define that the following checks be performed when a message is sent, or a
document is saved / printed.
For each type of Check supported, rules are available in a general (Check ...) or a Label specific (With
this <Label>, check.....) form depending on whether you are adding the rule as an Any label or a rule
associated with a specific label value.
Some checks (e.g. mandatory selectors) are supported by all applications, others (e.g. Perform
Clearance checks) are only applicable to one class of application, or only a subset of the applications.
Application Rule support
OL (Outlook) / O(WA) / Notes / Mob / M(ailAdd-in) / W(ord) / Ex(cel) / PP(Pow erPoint) / Pr(oject) / V
(isio) / CAD / SP / F(ile) / Box indicates that the application supports the setting.
^ The operation of these rules is limited under CAD Classifier for DraftSight. If a rule triggers, a warning
is presented to the user, but the action cannot be cancelled regardless of the buttons visible.
Rules Outl' OWA Mail Notes Mobil Wor Exce P'Poi Projec CAD S'Point DCS
k Add-in e d l nt t & File
emails Visio
Check these mandatory selectors OL OWA 3.10.0 Note Mob W Ex PP Pr + VCAD SP + F
s ^
Check for Author label change W Ex PP Pr + VCAD
^
Check for label change OL OWA 3.10.0 Note Mob W Ex PP Pr + VCAD SP + F
s ^
Check for the high-water mark OL OWA 3.10.0 Note
s
Check clearance for attachments OL 3.10.0
Check clearance for recipients OL OWA 3.10.0 Note Mob
s
Check clearance for originator OL OWA
Check subject length does not OL OWA 3.10.0 Mob
exceed
Check subject length exceeds OL OWA 3.10.0 Mob
Check message size OL OWA 3.10.0
Check content (Enterprise) OL W Ex PP
Check number of recipients OL OWA 3.10.0 Mob
Check for these recipients OL OWA 3.10.0 Mob
Check for Reply to All response OL 3.10.0
Check for use of default label OL OWA 3.10.0 Mob W Ex PP Pr + V
Check with the user OL OWA 3.10.0 Note Mob W Ex PP Pr + VCAD F
s ^
Check these selectors for expired OL OWA 3.10.0 W Ex PP Pr + VCAD SP + F
dates ^
Check for additional recipients on OL OWA 3.10.0
reply or forward
Check for unlabelled attachments OL
Check for a suggested OL W Ex PP Pr + V DCS
classification
Check RMS user defined W Ex PP
permissions for uncleared
recipients
Check for RMS protection W Ex PP
p377
Classifier Administration Server Guide UM644001
Check these mandatory selectors . Warn user if check fails with this message.
Check for author label change and permit alteration. Warn user if check fails with this message.
Check for label change and permit alteration. Warn user if check fails with this message.
Check for the high-water mark of all attachments. Warn user if check fails with this message.
Check clearance for attachments . Warn user if check fails with this message. See Perform Clearance
Checks when sending messages for details of how these checks are implemented.
Check clearance for recipients . Warn user if check fails with this message. See Perform Clearance
Checks when sending messages for details of how these checks are implemented.
Check clearance for originator . Warn user if check fails with this message. See Perform Clearance
Checks when sending messages for details of how these checks are implemented.
Check subject length does not exceed these characters. Warn user if check fails with this message.
Check subject length exceeds these characters. Warn user if check fails with this message.
Check message size including all attachments does not exceed these kilobytes (KB). Warn user if
check fails with this message.
Check content for this. Warn user if check fails with this message and Show hits.
Check number of recipients does not exceed these. Warn user if check fails with this message.
Check for these recipients . Warn user if check fails with this message.
Check for Reply to All response and Warn user if check fails with this message.
Check for use of default label . Warn user with this message.
Check with the user. Warn user with this message.
Check these selectors for expired dates . Warn user with this message.
Check for additional recipients on reply or forward . Warn user with this message.
Check for these unlabelled attachments . Warn user with this message.
Check for a suggested classification and Automatically apply. Warn user with this message if a
suggested classification is available for manual application, or this message if the suggested
classification cannot be applied.
p378
Classifier Administration Server Guide UM644001
(c) For all the Check rules the Warn / Prevent / Audit / Challenge options should be assigned as
described in Warn / Prevent / Audit / Challenge options for Check rules .
(d) Complete the wizard sequence by supplying a name for the rule. The name of the application
w ill automatically be pre-pended.
Note: You may subsequently edit the rule to change any of the settings (e.g. the marking format used).
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
This rule is applicable to all applications and can be used to define that checks should be applied to
ensure that the label chosen meets label validity criteria – in particular that any Selector set as
Mandatory has a value chosen.
Different rules can be defined for different applications. So a selector may be Mandatory for documents
(e.g. an archive annotation), but such a setting might be irrelevant to emails. You might also have a
label value related rule that requires a value for one Selector only if another Selector has a particular
value.
Note: For Outlook Emails only - see also for further information on the user experience when this rule
fires for an Outlook Show label dialog when Mandatory Label message.
Note: A single Check these mandatory selectors rule may be defined for SharePoint which will apply
to all document types. See SharePoint Classifier Guide / Viewing and Changing Label Value after
upload section for usage.
Note: The operation of this rule is limited under CAD Classifier for DraftSight . If a rule triggers, a
w arning is presented to the user, but the action cannot be cancelled regardless of the buttons visible.
The rule has the form:
Check these mandatory selectors . Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Select these mandatory selectors, which will present you with a dialog showing all the
active Selectors available in the policy.
p379
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
The rule is only applicable to Office Classifier applications and allows you to define label change abilities
specific to the 'Author' w hich apply instead of the abilities defined via a general Check for label change
rule. If no Check for Author label change rule is applicable, then the Author will be subject to any
general Check for label change rule defined.
Note: For the purposes of this rule the 'Author' is not the Microsoft Office Author which is easily
changed by the user, but is a value stored in a Classifier specific manner in a bj-Saver custom property.
This property holds the identity of the first person to save the document. All documents, new, old,
unlabelled and labelled have the bj-Saver property set on them when they are first changed (saved) and
there is not an existing bj-Saver property present. If an existing document is opened which does not
have a bj-Saver value, the current user's identity will be used to populate bj-Saver. Deletion of the
bj-Saver value is possible. [For Visio documents bj-saver is stored as a 'Solution XML Element', rather
than a document custom property]
Note: If both a Check for Author Label Change rule and a general Check for Label Change rule are
configured, then the Check for Author Label Change rule will apply if the current user is the 'Author',
otherwise the general Check for Label Change rule will apply.
Note: The operation of this rule is limited under CAD Classifier for DraftSight . If a rule triggers, a
w arning is presented to the user, but the action cannot be cancelled regardless of the buttons visible.
The rule has the form:
p380
Classifier Administration Server Guide UM644001
Check for author label change and permit alteration. Warn user if check fails with this
message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Select the alteration token which will present you w ith the following per-selector choices :
Additional Values only appears for Multiple selection list selectors indicating that the
user may add additional values, but may not remove any existing
values set.
Removing values only appears for Multiple selection list selectors indicating that the
user may remove values, but may not add additional values.
Increase Date only appears for Date picker or Date offset selectors, indicating that
the user can set a date / choose a new offset that results in a date
later than any currently applied date
Decrease Date only appears for Date picker or Date offset selectors, indicating that
the user can set a date / choose a new offset that results in a date
earlier than any currently applied date.
Note: The upgrade dow ngrade check feature is only applicable if you have designated a
p381
Classifier Administration Server Guide UM644001
Selector available in the Policy to be Hierarchic (see Properties (Selector values) Hierarchy
Setting).
Note: If the Microsoft Office auto save feature is enabled in any of the applications, the
user warning messages may be displayed when the auto save feature executes.
Set / unset Allow multiple rules of this type . By default (Disabled), Classifier
Administration will detect duplicate rules of this type and only action 'the first' in the rules
tree. Enabling this setting means that Classifier w ill action each of the 'duplicate' rules in
turn - which may of course lead to multiple policy check dialogs.
Note: Each potentially duplicate rule must have the setting enabled, otherwise duplicates
are not allowed. Assign the required Warn user and this message settings as described in
Warn / Prevent / Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
This rule is applicable to all applications.
Note: A single Check for label change rule may be defined for SharePoint. However, SharePoint
Classifier limits the scope for label changing. See SharePoint Classifier Guide / Viewing and
Changing Label Value after upload section for further details.
Note: The operation of this rule is limited under CAD Classifier for DraftSight . If a rule triggers, a
w arning is presented to the user, but the action cannot be cancelled regardless of the buttons visible.
Note: Mail Add-in only supports this rule w hen forwarding or replying to a message item (not for
meeting requests etc).
The rule can be used to limit user's ability to change labels:
To change labels on existing documents – that is if they open an existing document that is labelled
any changes to the label are policed according to this rule.
To limit the user's ability to change labels if using Sent or Received email or web email messages as
the basis for a new email message. Thus the option affects Reply to / Forw arding and Re-send
actions and limits the user’s ability to manipulate the label for the new email message (which uses
the label from the existing email message as its initial label value).
Note: If both a Check for Author Label Change rule and a general Check for Label Change rule are
configured, then the Check for Author Label Change rule will apply if the current user is the 'Author',
otherwise the general Check for Label Change rule will apply.
The rule has the form:
Check for label change and permit alteration. Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Select the alteration token which will present you w ith the following per-selector choices :
p382
Classifier Administration Server Guide UM644001
p383
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is only applicable to Email, OWA and Notes Classifier.
This rule can be configured to apply checks when sending an email or w eb email message to ensure that
the email message Label ‘dominates’ labels associated with any attachments (including attached email
messages, and documents in .ZIP files). The checks are limited to attachment types supported by
Classifier (see Appendix - Label Propagation Mechanisms ).
Examples of the end user experience when these rules are triggered can be found in Attachment
Handling.
Note: Saving as PDF: You can populate various standard document properties ( Title, Author,
Subject and Keywords) that will be propagated if you save an Office document as PDF. However,
Office applications do NOT propagate any Custom Properties to the PDF. In particular the
bjDocumentSecurityLabel is NOT propagated. Email, OW A and Notes Classifier will check defined
Label Locations for recognisable labels in standard PDF file properties for the Check for the
high-water mark and Add an attachment list rules.
Note: For Outlook Emails, the operation of this check is modified if Automatically Elevate email label is
Enabled. If the label can be elevated automatically to dominate all attachments ( Label Dominance), the
user will not be involved in the operation regardless of the rule settings.
Due to the nature of the OWA and Notes environments it is not possible to support an equivalent to the
Automatically elevate email label feature. In some unusual circumstances this can give rise to different
user experiences as described in User experience variance betw een Email, OWA and Notes.
The rule has the form:
Check for the high-w ater mark of all attachments. Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
There are no rule specific settings applicable to these rules.
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
Note: A High-water mark check including Visio attachments requires that Visio is installed for the check
to complete successfully. If Visio is not installed, a prompt may appear to install Visio. The same
consideration applies to Visio files inside a ZIP. OWA does not support High-w ater mark checks for Visio
files.
Note: Embedded images may be excluded from these checks using the Include embedded images when
performing attachment checks setting.
Attachment Handling
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: Opening attachments from emails and then attempting to change the Label is not recommended
because this can lead to Email Classifier only seeing the original attachment. It is strongly
recommended to save the attachment first, amend it, and then re-attach it.
Note: OWA Classifier does not support checking of Labels on Visio files since it requires that the
application is installed on the server.
Note: Images pasted into a message (e.g. using a 'Snipping tool') appear as an unlabelled attachment
but with no meaningful name (file type) and as a consequence these are ignored by high-water mark
checks.
Note: ADS (Additional Data Stream) - Email Classifier (Outlook) can access label values stored in ADS
for an attachment (e.g. as might be set on a text file by File Classifier), and use that value as part of
high-water mark checks. Any value found is then stored w ith the attachment and is available for use in a
p384
Classifier Administration Server Guide UM644001
Selecting an ADS labelled item in explorer and then invoking Send to w ill NOT provide access to the
label value.
Email, OWA and Notes Classifier can be configured to take account of the label values of attachments
w hen performing high-w ater mark checks w hen sending an email, web or Notes email. Further details
on how Email, OWA and Notes Classifier try to determine a label value for various file types can be
found in Appendix - Label Propagation Mechanisms .
Note: By default documents embedded in Office documents will be ignored when performing high-water
mark checks. This behaviour can be modified using the HW MCheckEmbeddedOfficeDocuments registry
setting (see Client Configuration Registry settings ).
Note: Outlook - You can control how embedded images are handled using the Include embedded
images when performing attachment checks setting.
The checks are intended to ensure the Email label dominates any attachment labels (see Label
Dominance).
If the high-water mark check fails and the setting Automatically elevate email label (Outlook Emails
only) is set then the software will try to apply a label that allows the check to pass (Least upper
bound).
If this setting is not Enabled, or the software cannot automatically rectify the problem, then the sender
is presented w ith a dialog (examples below) presenting the possible actions as permitted by the Allow /
Warn settings in the Check for the high-water mark rule.
Note: OWA and Notes Classifier do not support Automatically elevate email label, nor Ensure label
dominates all portion markings. In some circumstances this can give rise to different user experiences
as described in User experience variance betw een Email, OWA and Notes.
Zipped Files Handling
It is possible to send an email or web email message containing a compressed zipped file. These
compressed zipped files may contain labelled items. Upon sending an email message containing zipped
files as an attachment, Email, OWA and Notes Classifier will attempt to de-compress these zip files and
check the contents for any Classifier labelled items (e.g. Word, Excel or PowerPoint document) include
their labels in the high-w ater mark checks.
Attempts to access encrypted .ZIP files triggers a high-water mark check failure if the setting Warn if file
contents cannot be accessed is Enabled. If the setting is disabled, failures are ignored by the check.
Similarly failure to access a file w ithin a ZIP file triggers a warning depending upon the setting.
Note: Email, OWA and Notes Classifier impose no limit on the nesting levels in a ZIP file, but have only
been tested to de-compress to a nesting level of 7.
High-water mark check failure user interface
If high-water mark checks are applied, then Classifier performs the necessary checks and presents a
dialog should one or more attachments fail the checks. The failing attachments are listed (under details)
along with a reason for failure (either the attachment label value, or "Failed to access archive"). If Allow
manual upgrade when sending messages is Enabled AND a high-water mark label can be derived
(and Automatically elevate email label is Disabled), then both the Upgrade Message and Remove
buttons will be presented; otherwise only the Remove button will be available. Clicking Upgrade
Message will raise the label to the high-w ater mark value; clicking Remove will remove the
attachment.
p385
Classifier Administration Server Guide UM644001
Attachment Check
The user selects from the available options - Remove / Upgrade Message ( Outlook Emails only), Back
or Continue.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Email Classifier (Outlook) supports two settings that OWA Classifier and Notes Classifier do not:
p386
Classifier Administration Server Guide UM644001
If these settings are enabled, the user experience of an apparently similar sequence may be different as
outlined in the following examples:
A With a high-water mark check configured and Automatically elevate email label enabled:
Draft a message and attach a document w ith a label value 'above' the label set on the
message; then click Send.
o Under Outlook the Automatically elevate email label setting w ill come into play and,
assuming that the document label is suitable, the message label w ill be raised automatically
and message submission can proceed w ithout user involvement.
o Under OW A and Notes the high-water mark check will be triggered and the user w ill be
asked to resolve the mismatch.
B With high-water mark and label change checks configured, and with Automatically elevate
email label, Ensure label dominates all portion markings and Portion Marking enabled
for Outlook:
Define a rule to add to Subject as a marking prefix (e.g. a parsable marking such as [RES] for
Restricted),
Reply to a message that contains a 'high' label value in its Subject prefix (e.g. [RES]),
Change the label on the (reply) message to a 'lower' level (e.g. Public)
Click Send.
o Under Outlook, the Ensure label dominates all portion markings setting w ill cause [RES] in
the received Subject to activate the Automatically elevate email label action to reset the
label to [RES] and the submission proceeds w ithout user involvement.
o Under OW A and Notes the label change rule w ill be triggered A
( utomatically elevate
email label and Portion Marking are not supported) and the user is asked to resolve the
issue.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: Notes Classifier only supports domain based recipient clearance checks.
Note: Mobile Classifier only supports domain based recipient clearance checks, and does NOT support
Originator clearance checks.
Note: Mail Add-in does not support Check clearance for originator. Check clearance for recipients /
attachments only supports SMTP domain clearance checks.
These rules can be used if your configuration has Clearance features configured (see Clearance settings
). You can configure rules to check the clearance of the Originator, or Recipients or both. These checks
are performed when a message is sent.
Definition of these rules is straightforward and described below. Implementation of the checking process
and related Classifier configuration settings is described in Perform Clearance Checks when sending
messages.
Note: When Recipient Checks are performed, then the membership of any distribution group (DG) is
also checked (not Notes).
Note: Outlook Emails only - If a member of a DG is ‘removed’ as part of the Remove action then the DG
is replaced by the expanded set of ‘cleared’ members prior to submission.
Note: Attachment clearance checks check that the recipient clearance (how ever derived) allows each
individual attachment to be sent, as opposed to a High-water mark check which calculates the
high-water mark across all the attachments and the message label before performing a recipient
clearance check.
Note: Embedded images may be excluded from these checks using the Include embedded images when
performing attachment checks setting.
Note: Recipient clearance check is not supported for tasks.
These rules have the form:
p387
Classifier Administration Server Guide UM644001
Check clearance for attachments . Warn user if check fails with this message
Check clearance for recipients . Warn user if check fails with this message
Check clearance for originator . Warn user if check fails with this message
See Perform Clearance Checks when sending messages for details of how these checks are
implemented
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
There are no rule specific settings applicable to these rules.
See Check attachments/recipients/Originator - Warn / Prevent for a description of the end
user experience when these checks are triggered.
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: These rules are only applicable to Email and OWA Classifier.
These rules can be used to check that the message subject size is w ithin site defined values. The rules
have the form:
Check subject length does not exceed these characters). Warn user if check fails with this
message
Check subject length exceeds these characters. Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Select the these size token w hich will present you with a text entry dialog allowing you to
enter a numeric value for the Upper/Lower subject size.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
p388
Classifier Administration Server Guide UM644001
Check content
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is only applicable to Email Classifier, Office Classifier (Word, Excel and Pow erPoint) and
Notes Classifier.
Note: Content checking of RMS protected items never yields a match as the content is not accessible.
Note: Embedded images are excluded from Outlook Content Checks.
You must have configured one or more "matchers" as described in Content Library before you can
configure these rules.
See Content Checking User view for further details of how the checks are performed and the user
interaction.
Further control of the operation of a content check is provided through the following General Settings:
p389
Classifier Administration Server Guide UM644001
Show hits
Check the Show highlighted content matches if you want the user to see full detail. If
Show highlighted content matches is unchecked, the user will see no details of matches
found.
Note: Highlighting of matches in PDF files is only possible if Adobe Reader / Adobe Acrobat
if Edit > Preferences > Search > Enable search highlights from external server is
Enabled.
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and supply a name to complete the wizard.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: These rules are only applicable to Email and OWA Classifier and are not supported for tasks.
Note: The number of recipients check will, where possible, include the number of recipients
introduced by Distribution Lists. The number of recipients check is performed before any Add these
addresses to recipient type rule.
p390
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is only applicable to Email and OW A Classifier and is not supported for tasks.
Note: The Recipient type check is performed before any action to add additional recipients.
The rule allows you to check for use of a particular recipient type. For example you may wish to
discourage the use of Bcc. The rule has the form:
Check for these recipients . Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Select these (the recipient type token) which will present you with a dialog allowing you to
choose w hich type of recipient the check applies (To, Cc or Bcc).
To Cc Bcc
Set / unset Allow multiple rules of this type . By default (Disabled), Classifier
p391
Classifier Administration Server Guide UM644001
Administration will detect duplicate rules of this type and only action 'the first' in the rules
tree. Enabling this setting means that Classifier w ill action each of the 'duplicate' rules in
turn - which may of course lead to multiple policy check dialogs.
Note: Each potentially duplicate rule must have the setting enabled, otherwise duplicates
are not allowed.
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is only applicable to Email Classifier.
The rule allows you (for example) to limit use of the Reply to All action.
If Warn user is set to Prevent, Classifier will attempt to disable the Reply to all button. How ever, it is
sometimes possible for a user to circumvent this disabling. If the setting is Warn, or the user finds a
w ay to circumvent the disablement, the user is prompted in the usual manner.
The rule has the form:
Check for Reply to All response and Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is applicable to Email, OWA and Office Classifier, but not Notes or SharePoint Classifier).
This rule might be used to draw the user's attention to the fact that they are sending an email or saving
/ printing a document w ith the default label value. This may be useful if for example you have defined a
default label setting in the policy that limits circulation forcing users to specifically choose another label
value to achieve a broader circulation.
Note: This Check for use of default label rule only takes effect the first time a message is sent. If the
user changes the label to a different value then back to the default, the rule still fires. The rule does not
apply to replies or forwards.
Note: Availability of the <Label> specific variant of the Check for default rule might seem unnecessary.
However, it is included for consistency and may still be configured.
The rule has the form:
Check for use of default label . Warn user with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
p392
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is applicable to Email, OWA, Notes, Office Classifier and File Classifier
Note: The operation of this rule is limited under CAD Classifier for DraftSight . If a rule triggers, a
w arning is presented to the user, but the action cannot be cancelled regardless of the buttons visible.
This rule type can be used so that (for example) the user's attention is drawn towards the action they
are about to perform or to remind them of site process requirements they should follow prior to
sending a message or saving / printing a document. Such rules will take effect every time a message is
sent, or document is saved or printed.
The rule has the form:
Check with the user and Show Fix option. Warn user with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Set the Show / Hide Fix option
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is not applicable to Notes Classifier.
Note: The operation of this rule is limited under CAD Classifier for DraftSight . If a rule triggers, a
w arning is presented to the user, but the action cannot be cancelled regardless of the buttons visible.
Note: This check is performed when opening a document (Office Classifier); when sending a message
(Email Classifier and OW A Classifier); when setting the classification on a file (File Classifier); and when
the label dialog is opened (SharePoint Classifier).
The rule allows you to warn users that they are about to view / send an item that includes a date
selector item that has expired. The check compares the date in the item classification with the current
local date. If the current local date is later than the date in the item classification, the rule fires and the
relevant warn action taken. The rule has the form:
Check these selectors for expired dates . Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
p393
Classifier Administration Server Guide UM644001
Select these which will present you with a dialog allowing you which of the date selectors
are to be checked. If you do not have any Date picker or Date offset selectors defined in the
policy the list will be empty.
Label Expiry
Choose the selectors that are to be checked for expiry.
Set / unset Allow multiple rules of this type . By default (Disabled), Classifier
Administration will detect duplicate rules of this type and only action 'the first' in the rules
tree. Enabling this setting means that Classifier w ill action each of the 'duplicate' rules in
turn - which may of course lead to multiple policy check dialogs.
Note: Each potentially duplicate rule must have the setting enabled, otherwise duplicates
are not allowed.
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
Admin : Labelling Configurations {configuration} Policies {policy} / [Set Rules] -> Add a
rule or Edit rule
Note: This rule is only applicable to Email, OWA Classifier and Mail Add-in.
Note: Mail Add-in only supports this rule w hen forwarding or replying to a message item (not for
meeting requests etc.).
This rule might be used to draw the user's attention to the fact that they are forwarding or replying to
an email and have inserted additional recipients (you can remove recipients and the rule will pass).
The rule has the form:
Check recipients list for additions on reply or forward. Warn user with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the wizard sequence by
supplying a name for the rule.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
p394
Classifier Administration Server Guide UM644001
Note: This rule is only applicable to Email Classifier and Notes Classifier.
Note: Embedded images may be excluded from these checks using the Include embedded images when
performing attachment checks setting.
This rule might be used to draw the user's attention to the fact that they are sending an email
containing an attachment that is unlabelled when attachments of that type would normally be labelled
(e.g. an unlabelled Word document).
Note: Pasting images into a message (e.g. using a 'Snipping tool') does not trigger an attachment
check as there is no meaningful file name (file type) associated with the 'attached image'.
The rule allows you to configure the attachment types (file extensions) that trigger the rule.
The rule has the form:
Check for these unlabelled attachments. Warn user with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Select these and a dialog is presented allowing you to control the file extensions that will
trigger the rule.
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: This rule is only applicable to EMail Classifier, Word, Excel, Pow erPoint, Project and Visio.
This rule might be used to check aspects of the document/message (as defined by the associated
conditions) and to suggest modifications to the current Classification according to the Classification
Settings defined by Edit Classification.
If one applicable Suggested Classification sets a value for a selector and another applicable
Suggested Classification Clears that selector then Classifier stops the process and the defined
Warn action is invoked using the 'cannot be applied' message.
If one or more Suggested Classifications are applicable, Classifier will attempt to apply each of the
applicable Classification settings. Classifier uses its high-water mark algorithm to determine whether
p395
Classifier Administration Server Guide UM644001
a defined selector value should be applied. It then takes notice of any Clear setting(s).
Note: This rule is applied before the Check mandatory selector rule, so the option to Clear a
selector value should be used with care.
If the Suggested Classification includes a setting that cannot be applied to the current Classification
(e.g. set a value for a single selection non-hierarchic selector that already has a different value
defined), then Classifier stops the process and the defined Warn action is invoked with the 'cannot
be applied' message.
If all the applicable Suggested Classifications are successfully processed and the resulting
Classification is different to the original Classification then the Automatically/Manually apply
setting is invoked. That is:
Manually apply - the user is warned using the 'suggested classification available' message.
Automatically apply - any suggested classifications that are designated as Automatically apply if
possible will be automatically applied (if possible) with any unprocessed suggested classification
being flagged to the user using the 'suggested classification available' message.
There is a ‘suggested classification check’ which can be configured to be run when a message is sent or a
document is saved. The suggested classification can be run on demand
Note: Suggested Classifications can be run on demand by enabling the "Allow user driven suggested
classification" setting.
p396
Classifier Administration Server Guide UM644001
Enabling the "Allow user driven suggested classification" setting. The suggested classifications can be
selected in the "Text to display" drop down menus.
The messages are configured in the ‘User Message Library’ of the Classification Administration Server:
To configure a message:
p397
Classifier Administration Server Guide UM644001
2. Select Add a New Message. An Add User Message dialog window w ill appear.
3. Fill in the fields (Name, Language, Message Text, Help URL ).
4. To finish, click on the OK button.
This rule will check any Ad Hoc RMS protection applied to a docum ent to ensure that any
users given access are 'cleared' (SMTP dom ain clearance) for the current label.
The rule is configured in the sam e manner as desc ribed in Check clearance for attachments,
recipients or originator.
p398
Classifier Administration Server Guide UM644001
Note: This rule is ONLY meaningful if your users have a working RMS system.
For example, an attempt to invoke the Apply Ad Hoc Protection button without RMS established may
cause the application to crash.
This rule is used to inform the user that no RMS protection has yet been applied.
The rule has the form:
Check for RMS protection. Warn user if check fails with this message
Perform the operations common to all rules as described in Check rules (a) (Select policy,
Set rules tab, etc).
Assign the required Warn user and this message settings as described in Warn / Prevent /
Audit / Challenge options for Check rules .
Click OK and Next on the edit template screen and complete the sequence by supplying a
name for the rule.
If a Check for RMS protection rule is configured, Classifier w ill check a document for applied RMS. If
RMS has been applied, the check passes.
If the check fails, a policy check dialog is presented:
p399
Classifier Administration Server Guide UM644001
p400
Classifier Administration Server Guide UM644001
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
All Check rules require the items below to be configured.
If a Check rule is triggered, a Policy Check dialog will be presented; the dialog contents and
buttons shown w ill depend on the configuration of the rules triggered.
Note: The operation of various check rules are limited under CAD Classifier for
DraftSight. If a rule triggers, a warning is presented to the user, but the action cannot be
cancelled regardless of the buttons visible.
Action
Choose Warn / Prevent / Audit only / Challenge as required.
Warn allows users to override the check at submission time by using the Continue button.
Prevent inhibits override capability by removing the Continue button.
Note: The Prevent option may never be used. It is included for consistency and may be
configured.
Audit only - no dialog is presented to the user, but the occurrence is audited and the action
allowed to proceed.
Challenge is similar to the Warn option above (presenting the Continue button), but
provides the ability to present the user w ith a pre-configured set of reasons. Choosing
p401
Classifier Administration Server Guide UM644001
Challenge enables the Options button which is described further under Challenge options.
Note: Mobile Classifier w ill treat a Challenge setting as if Warn had been chosen.
Click OK.
Select this message and choose the message to be displayed.
Choose message
Challenge Options
Admin : Labelling Configurations {configuration} Policies {policy}/ [Set Rules] -> Add a
rule or Edit rule
Note: The operation of various check rules are limited under CAD Classifier for DraftSight . If a rule
triggers, a warning is presented to the user, but the action cannot be cancelled regardless of the
buttons visible.
If (Challenge) Options is selected from the Advise user dialog (see Warn / Prevent / Audit / Challenge
options for Check rules), the Options button becomes available providing access to the Challenge
Options dialog show n below:
Challenge Options
This allows you to define how the Challenge Policy Failure dialog appears:
The message containing the Challenge description text presented in the dialog.
p402
Classifier Administration Server Guide UM644001
Zero, one or more pre-configured reasons (messages) that appears in the dialog presented to the
user.
Whether the user can supply a "free text" reason ( Show user input field above and Other below).
p403
Classifier Administration Server Guide UM644001
CLEARANCE SETTINGS
Admin : Labelling Configurations {configuration} Clearance Settings
Note: Clearance Settings are only relevant if your site has decided to implement the Classifier
Clearance handling features.
The Clearance Settings nodes are hidden until the associated setting ( Application Settings) is Enabled.
Clearance Settings
If the Clearance settings nodes (e.g. Email Domains) do not appear then:
Open Global Settings/Application Settings .
Set Clearance Check email domains to Enabled if required (to allow you to configure
and use Email Domain clearances) .
Set Clearance check Library to Enabled if required (to allow you to define clearances for
use w ith SharePoint Classifier).
Set Dynamic Clearances to Enabled if required (to allow you to define Dynamic
Clearances)
The features supported are summarised as:
Email Domains This allows you to apply checks to messages destined for external email
domains. The clearances defined can be used by Email, OWA or Notes
Classifier, in conjunction with rules, to ensure that labelled messages are
not sent to recipients that do not have the necessary Clearance.
Clearance Library This allows you to define Clearance definitions which can then be used by
Classifier SharePoint (2016) to apply clearance based control over the
items that can be inserted into a SharePoint (2016) library.
Dynamic Clearances This allows you to define recipient Clearances derived at run time from an
items Active Directory attributes (User / Contact or Exchange Distribution
Group).
Note: For New Classifier Configurations, Dynamic Clearances are Enabled by default - although no
Dynamic Clearances are defined and therefore there is no effect.
The performance of clearance checks is controlled by the relevant application Check clearance for
attachments / recipients / originator rules. Operation of these rules and the effects of associated
p404
Classifier Administration Server Guide UM644001
Check clearance for recipients (Email, OWA, Notes and Mobile Classifier)
Dynamic Clearances
p405
Classifier Administration Server Guide UM644001
the current email message label then email message submission continues uninterrupted regardless of
whether Warn or Prevent is chosen.
If the originator or recipients fail the clearance check then the effect is dependent upon the
Warn/Prevent or Challenge setting in the Rule definition:
If Audit only is set then the occurrence is audited and the email submission proceeds but requires
no user involvement.
If Warn, Prevent or Challenge is set then email message submission is interrupted and the sender
is presented with a dialog (shown below) indicating the problem and presenting options as to how to
proceed as per the examples below.
Note: If Recipient Checks are performed, then the membership of any expanded distribution group
(DG) as governed by Always use Distribution List clearance is also checked.
Note: Outlook Emails only - If a member of a DG is ‘removed’ as part of the Remove action then the DG
is replaced by the expanded set of ‘cleared’ members prior to submission.
The dialogs below are show n in accordance with the Warn, Prevent or Challenge settings
Attachments / Recipients / Originator failing the clearance check are presented, with the text as defined
by the relevant rule(s).
p406
Classifier Administration Server Guide UM644001
Email Domains
Admin : Labelling Configurations {configuration} Clearance Settings Email Domain
Clearances
Note: Not supported by Classifier Mail Add-in.
An Email Domain Clearance defines the clearance that should be assigned to a given email domain
address space.
The configuration features are only available if Clearance check email domains is Enabled as
described in Clearance Settings.
If recipient clearance checking is enabled through an appropriate Check clearance for attachments
/recipients rule for Outlook, OWA or Notes, then any external recipient is checked using an Email
domain clearance that matches their email address.
These domain clearances are administered through the Clearance Settings / Email Domain. The
following actions are supported:
p407
Classifier Administration Server Guide UM644001
Email Domains
Choose Add a new email domain clearance . This will start a wizard.
Note: You can establish a 'default' email domain clearance (one that matches any
addresses that do not match any other configured email domain clearance) by leaving the
Email domain field blank. The resulting entry w ill appear in the summary list as Any
unmatched email domains , and operate as a backstop.
p408
Classifier Administration Server Guide UM644001
p409
Classifier Administration Server Guide UM644001
1. Select Clearance Settings / Email Domain Clearances . This will show a list of configured domain
clearances.
2. Select the relevant entry.
3. Select Edit email domain clearance . This will present a (pre-populated) Email Domain
Clearance Properties dialog box.
4. Change the Name for the SMTP domain if required in the usual form (e.g. xxx.yyy).
5. You can select the checkbox Include subdomains if you want the clearance to apply to all sub
domains of that address space. So for example an address space of abc.xyz with Include
subdomains checked would apply to domains w ith addresses of pqr.abc.xyz and lmn.abc.xyz.
6. Check all the Label values that the domain is cleared for. Complete the wizard.
7. Click on the OK button and the summary display will be updated.
p410
Classifier Administration Server Guide UM644001
1. Select Clearance Settings / Email domain clearance . This will show a list of configured domain
clearances.
2. Select the relevant Entry.
3. Select Delete email domain clearance .
4. Click on the Yes button to the delete the confirmation or No to cancel the action.
Clearance Library
Admin : Labelling Configurations {configuration} Clearance Settings Clearance Library
Note: Only applicable to SharePoint Classifier (3.10 or later).
The Clearance Library allows you to define Clearance definitions which can then be used by Classifier
SharePoint (2016) to apply clearance based control to the items being inserted into a SharePoint (2016)
library. That is, an item can only be inserted into a Library if its label is allowed by the clearance
associated with the Library.
These features are only available if Clearance Library is Enabled as described in Clearance Settings.
Initially there are no Clearances defined.
Each defined Clearance has a Clearances Default Labels defined. Clearances are listed alphabetically.
Clearance Library
The following functions are supported:
p411
Classifier Administration Server Guide UM644001
Delete (Clearance).
The summary display show s all defined clearances and the associated clearance information in per
selector columns. You can reorder these columns, but not delete any of them.
New Clearance
Enter the Name.
Check all the Label values relevant to the Clearance.
Click OK, and the domain clearance entry w ill appear in the summary list pane.
p412
Classifier Administration Server Guide UM644001
Properties (Clearance)
Delete (Clearance)
p413
Classifier Administration Server Guide UM644001
p414
Classifier Administration Server Guide UM644001
Dynamic Clearances
Admin : Labelling Configurations {configuration} Clearance Settings Dynamic
Clearances
Dynamic Clearances allow you to define Clearances that will be determined at run time based on User
property value conditions.
Such Clearance values w ill be used if Dynamic Clearances is Enabled under Application Settings and in
the following situations:
To check Originator Clearance in conjunction with a Check clearance for Originator rule.
To check Recipient clearance in conjunction with a Check clearance for recipients rule.
To check attachment clearances in conjunction with a Check clearance for attachments rule.
To apply clearance filters to the Label dialog if Masking of selectors against clearance is Enabled.
The Conditions relating to Dynamic Clearances are similar to other conditions, but have a specific
'Condition Type' of Dynamic Clearance User Properties . They are managed as other Conditions (
Condition Library).
A configuration option Always use Distribution List clearances is supported by Email and OWA
Classifier. If the option is Disabled then DGs are always expanded. If the option is Enabled, then DG
address is used to derive a clearance (if available), otherwise the DG will be expanded to perform
clearance checks.
Dynamic Clearances
Choose Add a New Dynamic Clearance . This will display the follow ing:
p415
Classifier Administration Server Guide UM644001
p416
Classifier Administration Server Guide UM644001
p417
Classifier Administration Server Guide UM644001
Email and Notes Classifier functionality can be enabled and disabled globally via Global Settings /
Classifier Application Settings.
OWA Classifier functionality can only be enabled and disabled via install/remove product actions.
Browser support information can be found under Browser Support (OW A).
Notes and Mobile Classifier functionality can only be enabled and disabled via install/remove product
actions.
Application Differences :
Taking Outlook functionality as the baseline, the follow ing topics summarise the differences betw een the
applications:
p418
Classifier Administration Server Guide UM644001
Policy Test Mode capability does not extend to testing in OWA or Mail Add-in environments.
Mail Add-in only supports messages. Other message types (e.g. appointments) are not supported.
Labelling of Calendar items is only supported in OWA Premium view.
During a Reply / Forward sequence, Email Classifier removes any existing subject markings at the time
the new message is created. Due to the environment, OWA / Mail Add-in can only 'replace' the subject
markings at the time the message is sent.
Enable/Disable of the OWA / Mail Add-in Classifier is via server based Install/Uninstall and Licence.
Assisted labelling and Environment properties in Marking Formats are supported by OWA / Mail Add-in
Classifier, but there are some differences.
Whilst OWA / Mail Add-in supports the Help links defined in a Classifier Configuration, the nature of
accessing these environments may mean that a defined link is not accessible due to external access
controls (e.g. additional authentication requirements).
The nature of the OWA / Mail Add-in environments means that checking must take place at the Server
(when the message is sent) and the error handling interactions do not alw ays operate quite the same
as in the Outlook client. In particular, Attachment labels are not checked until the message is sent and
it is not possible to support an equivalent to the Automatically elevate email label feature.
The server tends to run for extended periods and changes to the configuration do not take place in the
same manner as for a client (w here closing and restarting all Classifier supported applications will
ensure the latest configuration is used by a desktop client).
The end user experience may vary in some scenarios outlined in User experience variance between
Email, OWA and Notes.
Mail Add-in: On send, Classifier add-in code is invoked and Classifier performs any checks required. If
Classifier checks pass, all configured markings are applied. Note that subsequent checks by OWA/Mail
Add-in (e.g. no recipients), or indeed other add-ins, or user (e.g. no Subject) may cause message
submission to be halted w ith the draft message now showing the marking information. This is different
to Email Classifier w here Classifier is invoked after Recipient / Subject checks etc.
p419
Classifier Administration Server Guide UM644001
Notes Classifier essentially supports a subset of the features supported by Email Classifier (Outlook).
The key differences are:
Application of RMS and S/MIME security to a message is not supported by Notes Classifier.
Portion Marking in a message is not supported by Notes (nor any related Portion Marking features)
and attachment labels are not checked until the message is sent (there is no Automatically elevate
email label). The end user experience may vary in some scenarios as outlined in User experience
variance betw een Email, OWA and Notes.
Enable/Disable of the Notes Classifier is via server based Install/uninstall and Licence.
Message templates are not supported by Notes Classifier.
Folder View labelling is not supported by Notes Classifier.
The Favourites button is not supported under Notes 8.
The nature of the environment means that error handling interactions does not operate quite the
same as in the Outlook client. In particular the dialogs presented if Check rules fail (e.g. Recipient
clearance or high-w ater mark checks) do NOT present the Fix actions (e.g. Upgrade, Remove), the
user has to rectify the anomalies.
Only a subset of Classifier Applications Settings is supported by Notes Classifier.
Only a subset of General Settings are supported by Notes Classifier.
Only a subset of Rules are supported by Notes Classifier.
p420
Classifier Administration Server Guide UM644001
For information regarding support for other browsers see the OWA Classifier Release Note.
Google Chrome
Microsoft Edge
Internet Explorer 11
Safari
Firefox
Opera
p421
Classifier Administration Server Guide UM644001
CONFIGURATION DEPLOYMENT
Note: If you wish to Publish the Classifier Configuration via Active Directory then the Active Directory
Schema must be updated ( Extending the Active Directory Schema ). Schema update is not required if
you intend to Publish the configuration via file store.
If you wish to use the optional Classifier Management Agent, then this must be installed and configured
as described in the Management Agent Guide.
The schematic below shows logically how the Classifier configuration is deployed.
Configuration Deployment
The next steps vary according to whether the Classifier Management Agent is in use.
p422
Classifier Administration Server Guide UM644001
Label Configuration policy settings to ensure that Classifier Client products (e.g. Email and Office
Classifier) will obtain their Classifier Configuration from the correct location and that users will be
assigned the correct Classifier policy (available for Local Machine and Current User). The Registry
Keys and the effects if the policy setting is not configured corresponding to these settings are
described in Label Configuration Registry Settings .
o This includes a sub-group of settings relating to Service Mode that are only available for
the Local Machine.
o Web Host Settings that are only applicable if you plan to retrieve master configuration from
a URL location.
Client Configuration policy settings that can be used in unusual circumstances to control some
aspects of Classifier Client operation (available for Local Machine and Current User). The Registry
Keys corresponding to these settings are described in Client Configuration Registry Settings .
Manually configurable - Settings to Auto Enable Microsoft Office Header / Footer controls .
File Classifier policy settings (available for Local Machine and Current User) that can be used to
control aspects of File Classifier operation. These are only relevant if you are using File Classifier and
are described in File Classifier Registry settings .
Management Agent policy settings as described in the Classifier Management Agent Guide .
Note: OWA Classifier is configured per server, and all users of that OWA server will operate under the
Configuration and Policy used by that server.
Note: OWA Classifier only changes its configuration after a restart. Thus after publishing an updated
configuration, an IISRESET w ould be required to cause OWA Classifier to use that new configuration.
Note: If you are using Group Policy mechanisms, the Client operation relies on the Group Policy settings
reaching the client. If the effects are not as expected you should run regedit and check that the relevant
entries are present. Running GPUPDATE /Force may be of assistance. Check that the client machine is
properly recognised in the domain - removing and re-introducing the client can resolve this issue.
Note: If a user is a member of more than one grouping you can use Group Policy Resultant set of Policy
(RosP) to establish the configuration they w ill actually get (i.e. the Classifier Policy they will use).
p423
Classifier Administration Server Guide UM644001
Each Classifier application / service context (e.g. Email or Office Classifier, OWA Classifier, etc.) looks
for relevant configuration registry settings below various locations in the registry.
The locations searched vary with the application type and further details can be found under:
Client Registry Locations (Email and Office Classifier, Notes Classifier, File Classifier, CAD Classifier,
Pow er Classifier for files and Power Classifier for SharePoint).
Classifier Service Registry Locations (OWA Classifier, Classifier Reporting, SharePoint Classifier,
Classifier Management Agent).
This covers the Classifier Applications: Email and Office Classifier, Notes Classifier, File Classifier, CAD
Classifier, Pow er Classifier for files and Power Classifier for SharePoint.
Each will look for the configuration registry settings:
Setting (examples)
ClientServerOverride
LabelConfiguration
Policy
PolicyFileClassifier
PolicyOutlook
ServerFileSystemRoot
ServerRootType
UseWebServer etc
ValidityPeriod
This topic covers the Classifier Applications: OW A Classifier, Classifier Reporting, SharePoint Classifier,
Classifier Management Agent.
Note: If more than one service (OW A Classifier, SharePoint Classifier, etc.) is installed on a single
system, they w ill all use the same registry settings. For these services, use of ServiceMode (items 1 or 2
below ) is recommended as it ensures separation of registry key usage by these services and other
p424
Classifier Administration Server Guide UM644001
Classifier applications (e.g. Email and Office Classifier) running on the same system.
Each will look for relevant registry settings (Blank = Not used by that service):
LabelConfiguration Y Y Y
Policy Y Y Y
ServerFileSystemRoot Y Y Y Y
ServerRootType Y Y Y Y
UseWebServer etc. Y
Setting
LabelConfiguration
ServerFileSystemRoot
ServerRootType
below its own private ExchangeServiceMode branch and searches the following locations in the order
shown:
1. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Boldon James\ConfigManager
\ExchangeServiceMode
2. HKEY_LOCAL_MACHINE\SOFTWARE\Boldon James\ConfigManager\ExchangeServiceMode
See Exchange Classifier Guide > Classifier Routing Agent ) for further information.
The Classifier Administration Server uses the following registry location to store the last "published to"
location:
HKEY_CURRENT_USER\ SOFTWARE\Boldon James\ConfigManager.
p425
Classifier Administration Server Guide UM644001
The values w ill of course depend on your local environment and whether you are using Active Directory
or File Store as the Master Configuration location, and whether Classifier Management Agent is
deployed. See description in Label Configuration Registry Settings for more information.
Note: For Management Agent, OW A Classifier and SharePoint Classifier it is recommended that registry
entries are established under ServiceMode (see Label Configuration Registry Settings ).
o A sub group of settings relating to Service Mode are only available for the Local Machine.
File Classifier settings are only relevant if you are using File Classifier. They are described in File
Classifier Registry settings .
Management Agent settings are only relevant if you are deploying the Classifier Management
agent. These settings are described in the Management Agent Guide .
The mechanisms are the same for each of the above. The examples below cover the Label Configuration
settings as these are the most likely to be used.
Firstly define the settings that are to be common to all users of a PC (i.e.
HKEY_Local_Machine).
p426
Classifier Administration Server Guide UM644001
For 2003; from Active Directory Users and Computers select the domain (e.g.
CLASSIFIER.TEST) and select Properties from the context menu. Select the Group Policy
tab.
For 2010; use Group Policy Management Editor MMC to get directly to the tree.
Select the Default Domain Policy entry and click Edit.
Select Computer Configuration / (Policies /) Administrative Template / (Classic
Administrative Templates) / Boldon James / Label Configuration which will present
the following settings:
p427
Classifier Administration Server Guide UM644001
Ensure that the setting is Enabled, and choose which method you w ish to use (File System
or Active Directory). Click OK.
If you choose File System you will then have to define the (shared) location of the
configuration files by selecting File Based Configuration Location , choosing Properties
and then entering the network path to the location (e.g. \\ICS-SVR-1\Classifier
Configuration) as per the example below.
p428
Classifier Administration Server Guide UM644001
Select Label Configuration Name and choose Properties. Ensure that it is Enabled and
enter the name of your Configuration (e.g. Classifier test). Click OK.
Select Policy Name and choose Properties. Ensure that the setting is Enabled and enter
the name of the policy applicable (e.g. All Users). Click OK.
If you need to set the Configuration Validity Period - described in Label Configuration
Registry Settings, then select Downloaded Configuration Validity Period and choose
Properties.
Ensure that it is Enabled and enter the required validity period in hours. Setting a value of
0 (zero) will restore default operation so that the Configuration validity is checked each time
a Classifier enabled application starts. Click OK.
Classifier Administration supplies various .ADM and ADMX/ADML files available from the sub-folder
Classifier Group Policy Templates beneath the Classifier Administration Server folder in the Base
Bundle. These can be used to extend the group policy settings. The steps below provide an example of
how to extend Group Policy settings using the supplied files.
ADM style files:
o ClassifierConfig.ADM and ClassifierConfigPerUser.ADM .
p429
Classifier Administration Server Guide UM644001
Select Add and then brow se to the relevant install location (e.g. Program Files\Boldon
James\Classifier Administration ).
Select the relevant ADM files and click Open followed by Close. The files will be added
w hich will add new entries below both the Computer Configuration and User Configuration
Administrative Template nodes.
ADMX/ADML style files (provided in pairs)
o ClassifierManagementAgent.admx and ClassifierManagementAgent.adml (these are
only relevant if you are using the Classifier Management Agent, but benign if applied and
not used).
Copy the pair of files from the Classifier Group Policy Templates folder:
ClassifierManagementAgent.admx to Windows\PolicyDefinitions
p430
Classifier Administration Server Guide UM644001
The following keys (HKEY_LOCAL_MACHINE) relate to Configuration location, the Configuration and
Policy.
Note: It is recommended that registry entries are established under ServiceMode (Label Configuration
Registry Settings) for Management Agent, OWA Classifier, SharePoint Classifier.
Note: A full description of all the Registry settings relevant only to the Management Agent can be found
in the Management Agent Guide.
The example below shows entries under ...\Policies\Boldon James\ConfigManager. You can generally set
up relevant entries under any of the supported registry locations and the precedence defined in
Configuration Registry Search Algorithm applies if entries appear in more than one sub-tree. However,
the algorithm expects to find the following as 'pairs' under a sub-tree:
Registry Settings
p431
Classifier Administration Server Guide UM644001
Registry Settings
The Entries (and Policy setting name) listed below are established under ...\Boldon
James\ConfigManager.
Entry \ClientServerOverride (Client Server Override)
Type REG_DWORD (Prior to 3.7 this was a REG_SZ setting, but newer softw are versions will
continue to w ork with the old setting).
Data Normally Classifier client applications (e.g. Email and Office Classifier) retrieve their
configuration from the designated location (AD or file store) AND save a copy locally to
facilitate offline operation. In some environments this can be inappropriate. This setting
can be used to inhibit the local storage of the configuration.
0 (default if not configured) The standard operation applies (local storage of the
configuration).
1 The configuration is not stored locally.
p432
Classifier Administration Server Guide UM644001
0 (Disabled - the default if not configured). Classifier Client applications will continue to
retrieve configuration directly and w ill not register with the Management Agent.
1 (Enabled) Classifier Client applications will use the Management Agent:
- Each Classifier client w ill obtain its configuration via the Management agent and not
check for a more recent configuration as described in Management Agent Guide >
Configuration update – single point of contact.
- The Email and Office Classifier clients ( not File Classifier) will register with the
Management Agent as part of Client Application Monitoring .
p433
Classifier Administration Server Guide UM644001
p434
Classifier Administration Server Guide UM644001
The directory that contains the master configuration must also contain an appropriate
version.txt file.
p435
Classifier Administration Server Guide UM644001
Entry \DisplayContentCheckProgress
Type REG_DWORD
Data 0 Progress information is not displayed whilst performing Content Checks.
1 (default) Progress information is displayed whilst performing Content Checks.
Prior to Classifier 3.14, the progress information w as show n throughout the Content Check
w hich could sometimes cause flickering. From 3.14, the progress indicator is only
show n during the (possibly lengthy) index building activity.
p436
Classifier Administration Server Guide UM644001
Office 2016
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Outlook\Resiliency\AddInList\
BoldonJames.SAFEoffice.Addin.Connect
This default Classifier behaviour can be overridden by setting this key (see Data below ).
Type REG_DWORD
Data Not configured - The default behaviour applies and the key defined above is established.
0 - The keys defined above are not established.
Entry \ExcelAutoEnableDifferentOddEvenPages
Only applicable if relevant Excel Header/Footer 'Different Odd & even pages' rules are
configured.
Type REG_DWORD
Data 0 (default) Feature is disabled.
1 Auto enables 'Different Odd/Even Pages' header/footer on thefirst worksheet of a
w orkbook.
2 Auto enables 'Different Odd/Even Pages' header/footer on all w orksheets of a w orkbook.
Entry \PowerPointSlideMarkings
Only applicable w hen Pow erPoint Footer rules are configured.
Type REG_DWORD
Data 0 (default) Classifier footer markings w ill be added to all the slides in the presentation.
1 Classifier markings footer w ill be added to the First slide only of the presentation.
2 Classifier markings footer w ill be added to the Title slides only of the presentation.
3 Classifier markings footer w ill be added to all slides Except the first slide of the
presentation.
p437
Classifier Administration Server Guide UM644001
4 Classifier markings footer w ill be added to all slides Except title slides of the
presentation.
5 Classifier markings footer w ill be added to None of the slides of the presentation.
Entry \WordAutoEnableDifferentFirstPage
Only applicable if relevant W ord Header/Footer 'Different first page' rules are configured
Type REG_DWORD
Data 0 (default) Feature is disabled.
1 Auto enables the 'Different First Page' header/footer setting for first section of a
document.
2 Auto enables the 'Different First Page' header/footer setting on all sections of a document.
Entry \WordAutoEnableDifferentOddEvenPages
Only applicable if relevant W ord Header/Footer 'Different Odd & even pages' rules are
configured
Type REG_DWORD
Data 0 (default) Feature is disabled.
1 Auto enables the 'Different Odd/Even Pages' header/footer setting onall sections of a
document.
0 (default if not defined) File Classifier w ill not use an Alternate Data Stream to
hold a cache of the Label for all file types.
Non-zero File Classifier will cache the label in an Alternate Data Stream for all file types.
p438
Classifier Administration Server Guide UM644001
0 (default if not defined) An unlimited number of files are selectable by the user.
>0 The number of files that may be selected for Classification. If this value is exceeded
the “Classify” option becomes disabled.
Install the Classifier Schema Extension package from the Classifier Schema Extension
sub-folder of Classifier Administration Server in the Base Bundle.
The Classifier Schema Extension package can be deployed using either
ClassifierSchemaExtension.msi or Setup.exe.
After installation, from the Start menu locate All Programs / Boldon James /
Administration Tools .
Note: Extending the schema is a non-reversible operation.
Run Classifier Schema Extension .
Schema Extension
Click Start to update the schema
The tool will update the Active Directory schema and show a confirmation dialog; click OK
For Windows 2008 systems, ensure that the Active Directory Domain Services (AD DS)
tools are installed, otherw ise this will fail with error "Please ensure that the Active Directory
Domain Services tools are installed".
Click Exit.
SOFTWARE DEPLOYMENT
Desktop Clients
p439
Classifier Administration Server Guide UM644001
Email and Office Classifier and Notes Classifier can be deployed via standard MS Group Policy
mechanisms using the appropriate EMailAndOfficeClassifier.MSI or NotesClassifierClient.msi files.
The licence (distributed as part of the Configuration) controls the applications to w hich you have
access.
OWA Classifier
OWA Classifier must be installed on each Server that runs OWA supporting users that are to use
Classifier features.
Application operation.
Document types supported
L Set the Label on an item of this type. Depending on the item type, the label is stored in an
application custom property, as Meta-data, or a 'standard' property (e.g. ZIP Comment
field). The ability to change a label can be limited by Check for label change rules.
M Apply a Marking on an item of this type. A marking held in a Label Location may be used to
determine a label value.
R Read the label of an item of this type.
SPL Set a SharePoint label (only visible under SharePoint).
U For these items, labels under SharePoint cannot be changed.
ADS Set a Label value stored in NTFS Alternate Data Stream (ADS). Note that this is not
available in all environments (neither OWA attachments nor SharePoint upload). See also
Attachment Handling for further details of high-w ater mark handling of ADS under Outlook.
SA Save as - Document properties containing label information will be stored.
p440
Classifier Administration Server Guide UM644001
1 (Open Office documents) Office applications (e.g. Word, Excel) will store private custom
properties containing label information when saving as Open Office documents and that Label
information is available if the document is subsequently opened by the same office application.
However, this information is not available to other Classifier applications (e.g. File Classifier or
Outlook). By default File Classifier / Power Classifier stores label information in the ADS
(not available to Outlook). A specific plug-in (3) can be configured that w ill cause FC/PC to
store the label information as a custom property that can be accessed by that same plug-in
meaning it will be accessible to Outlook (for attachment checks). Label information set by File
Classifier / Pow er Classifier is not available to Office Classifier. Label information set by
w hatever mechanism may be meaningless to Open Office applications.
Thus MS Office applications and File Classifier may manifest different label values for the same
file.
2 (HTML documents). Word can save as a web page (HTM/HTML) or a single Web page
(MHT/MHTML) both of which will store private custom properties (e.g. the label) that are
recovered if Word subsequently opens that document. How ever, this information is not available
to other Classifier applications (e.g. File Classifier or Outlook).
[Word can also save as a filtered Web page (HTM/HTM) which does NOT include the custom
properties - such a document will appear as unlabelled when subsequently opened using Word.
Excel can save as HTML, but does not store custom properties so is unlabelled if opened
subsequently.]
By default File Classifier / Power Classifier stores label information in the ADS (not available
to Outlook). A specific plug-in (3) can be configured that w ill cause FC/PC to store the label
information as meta-data that can be accessed by that same plug-in meaning it will be
accessible to Outlook (for attachment checks).
Label information set by File Classifier / Pow er Classifier is not available to Office Classifier.
Thus MS Office applications and File Classifier may manifest different label values for the same
file.
3 (3A - Exchange Classifier only) Support for these requires additional configuration of Classifier
Plugins under guidance from Classifier Customer Support.
4 Visio must be installed on the platform for this to work (e.g. so not supported under
SharePoint).
Visio is launched to access a Visio file, so can incur a significant overhead (e.g. HWM checks in
Outlook).
5 Word and Excel can save documents as other types (e.g. W ord to TXT and Excel to CSV). Such
Save actions w ill typically indicate to the user that some information may be lost. Classifier
labelling and marking information may be lost.
6 Saving as PDF: You can populate various standard document properties ( Title, Author,
Subject and Keywords) that will be propagated if you save an Office document as PDF.
However, Office applications do NOT propagate any Custom Properties to the PDF. In particular
the bjDocumentSecurityLabel is NOT propagated. Email, OW A and Notes Classifier will check
defined Label Locations for recognisable labels in standard PDF file properties for the Check for
the high-water mark and Add an attachment list rules.
p441
Classifier Administration Server Guide UM644001
File Classifier, Pow er Classifier and the Classifier API (API is only supplied to support integration
w ith technology partner products) can set the relevant custom properties of a PDF document.
Message (3A) EML, MSG BJ Label custom property, Supported document label
locations.
Media (3) JPG, JPEG, JPE, JPC, JPF, BJ Label custom property (XMP Metadata).
JPS, JPX, JP2, J2C, J2K,
JFIF, MP4, TIF, TIFF, WMA
Text / RTF TXT, RTF Alternate Data Stream (as might be set using File or Power
Classifier).
Application operation
Application Notes
For the supported document types (see tables above) it uses the BJ label value
if it exists, otherw ise it checks configured locations ( Supported document label
locations) to determine the current label value.
Save:
For the supported file extensions (above) it sets the current BJ label, plus any
Markings defined by the configured rules.
For all other document types (e.g. PDF, RTF, TXT etc.) markings may be
applied (using configured rules) to the document properties (e.g. Author,
Header). These markings may be visible in the saved item, but there is no
separate BJ label available to other applications. Other Classifier applications
p442
Classifier Administration Server Guide UM644001
Email Classifier Open received messages use the BJ label value if it exists, otherwise check
configured locations (Supported mail label locations ) to determine the current label
OWA Classifier
value.
Notes Classifier
When performing operations on attachments (not Mobile Classifier) relating to
Mobile Classifier high-water mark or Attachment list rules:
Try to ascertain a label for each item as per 'Label may be found from ' in
the table above. Attachment types that are not supported, or not configured
are treated as unlabelled.
Save/Send: Sets the current BJ label, plus any Markings defined by the configured
rules to message properties when the message is Saved or Sent.
For documents supported by Office Classifier , write the BJ label value, and set
a custom property to ensure that Office Classifier will update all Marking
locations the next time the file is opened.
Note Visio is not supported by Pow er Classifier or File Classifier.
Note that from version 3.8 Pow er Classifier has a Set Update Markings
option which controls this effect as described in the Power Classifier Guide.
For other supported file types write the BJ label custom property.
All other attachment types optionally w rite the label to the NTFS Alternate
Stream Data.
For the supported document types (see tables above) it uses the BJ label value
if it exists, otherw ise it checks configured locations ( Supported document label
locations) to determine the current label value.
Save:
For the supported file extensions (above) it sets the current BJ label, plus any
p443
Classifier Administration Server Guide UM644001
For the supported file extensions (above) it sets the current BJ label, but no
rules (e.g. markings) are applied. See Classifier API documentation for
run-time parameters.
Note: Visio files can only be accessed if Visio is installed AND there is a significant
overhead as Visio will be loaded for each document accessed.
For the supported document types ( dll, zip, pdf, html, jpg, xls, xlsx, ppt,
pptx, vsd, doc, docx, mpp, odp, ods, odt, msg, pdb, txt, xps ) it uses the
BJ label value if it exists, otherw ise it checks configured locations (Supported
document label locations ) to determine the current label value.
(Any information held in the Alternate Data Stream is lost when uploaded.)
Write:
Note: The Open operational above described the general order when trying to find a label value. This
can be reversed by the Check label Locations first setting.
General Limitations:
Any Classifier label assigned to an RMS or S/MIME protected item w ill only be available when the
item is fully opened by a suitable application, so File / Pow er Classifier, Email /OWA / Notes
Classifier and SharePoint Classifier does not have access to labels in these circumstances.
Attempts to W rite a label value fail if the file is Read Only, or if the file is in use by another
application.
Attempts to Read a label may fail if the file is in use by another application.
Attempts to Read or Write a label fail if you do not have permission to access the file, or the file is
RMS protected or encrypted.
Attempts to Read or Write a label fail if the file is masquerading - i.e. the content does not match
the file extension (e.g. .TXT renamed as .DOC).
p444
Classifier Administration Server Guide UM644001
Plugins
Label recognition is performed by a Classifier component that is common across the Classifier
applications. This component utilises information held in an XML file (DocLabeller2) in a Plugins folder in
the configuration:
Plugins DocLabeller2
The file contains a section for each file type supported, defining information such as the file extensions
relevant to the file type, the (Write) properties that Classifier supports and the DLL used to process that
file type:
p445
Classifier Administration Server Guide UM644001
Plugins XML
Support for new file types, and extending support for existing file types may require updates to
Classifier softw are (e.g. a new DLL) and / or changes to this XML file.
The initial contents of this XML file are generated when the first Classifier Configuration is generated and
the file is propagated as part of the Classifier Configuration.
The following general sequence should be followed to modify and propagate changes to DocLabeller2:
Ensure any Classifier Client, Administration and Server software changes are applied and
deployed.
Get the current master configuration using Get Server Configuration. The retrieved
configuration is stored under ...\ Boldon James\Configuration as outlined in Configuration
Archives.
Make the necessary changes to ...\Label Configurations\Plugins\DocLabeller2.
Publish the updated Configuration using Publish Configuration.
The changes w ill become effective in the applications in due course.
Now consider a number of instances of the same basic Rule (e.g. Outlook FLOT) each with its own Label
match criteria:
p446
Classifier Administration Server Guide UM644001
Creating the rules above results in the following rule tree structure:
p447
Classifier Administration Server Guide UM644001
criteria, the higher the w eighting of the rule (higher weighting wins). Selector ordering is taken into
account (the second selector in the policy has a higher weighting than the first selector etc.).
The table below shows all the possible values of the selectors defined above, and which rule each
possible combination triggers. Rule 2 is the catchall rule that applies if there is no more specific match.
Now consider a Label value of “Public; Finance; Europe” – it matches every single rule defined above
w ith the exception of Rule 1 (No Label) w ill only match if no label value is selected.
Classifier must pick the ‘best’ match. This appears fairly easy because Rule 8 is an exact match for all
three elements. However, if Rule 8 w as not defined the answer is less obvious.
So ignoring Rules 1 and 8 in this instance, the algorithm can be summarised as follow s:
Any Rule that has a specific match for the Region (most significant selector) is ‘better’ than any Rule
that only has an <Any> or <Not Relevant> or <Alw ays> match for Region. Hence Rules 3, 4, 6 and 7
are immediately ‘better’ matches than Rules 2 and 5 can be ignored in the next refinement.
Now considering the preceding Selector (Department) in the policy, any rule that specifically matches
the Department value is ‘better’ than a Rule that has only an <Any> or <Not Relevant> or <Always>
match. Hence Rules 3 and 6 are ‘better’ than Rules 4 and 7.
Finally considering the first Selector (Designation) the <Any> is ‘better’ than a <Not Relevant> or
<Always> match which means that Rule 6 is ‘better’ than Rule 3, hence Rule 6 is the ‘best’ match. If
Rule 6 is subsequently deleted, then Rule 3 would be the 'best' match for this example label value.
p448
Classifier Administration Server Guide UM644001
To enable logging of any of the Classifier component products, run the BJTrace tool. Choose File /
Application Information, then select the application to be traced and choose Edit Settings. The
following dialog displays:
p449
Classifier Administration Server Guide UM644001
p450
Classifier Administration Server Guide UM644001
Event Details:
To: [email protected]
Cc: -
Bcc: -
From: [email protected]
Attachments: -
Rule: Recipient Clearance Check
Failed Recipients: [email protected]
The table below summarises the events that may appear depending upon the Audit settings and the
conditions that arise.
Note: Not all events may appear for each application. For example OWA does not support Portion
Marking, so it will never generate event 1125.
Note: Warning entries can be produced either when a rule fires and causes the user to be involved, or if
a rule fires but is configured as Audit only.
Event ID Severity Description
Category values
1 Classifier Auditing
2 Classifier Outlook Auditing
3 Classifier Word Auditing
4 Classifier Excel Auditing
5 Classifier PowerPoint Auditing
6 Reclassification Tool Auditing (not used)
7 Recipient clearance check
8 High-water mark check
9 Originator clearance check
10 Label downgrade check
11 Label validity check
12 Label change check
13 Label upgrade check
14 Warning failure override
15 Label auto upgrade
16 Classifier initialised
17 Classifier Project Auditing
18 Classifier Visio Auditing
19 OWA auditing
20 Rule
21 Policy
22 User Clearance
23 Domain Clearance
24 User Defined Messages
25 Selector Library
26 Marking Format Library
27 Settings
28 Auditor
29 User Clearance
p451
Classifier Administration Server Guide UM644001
p452
Classifier Administration Server Guide UM644001
p453
Classifier Administration Server Guide UM644001
Categories
applicable
2000 Info Used for unexpected conditions often related to limitations. The
Warning text logged describes the condition).
Error
Documents (Excel, PowerPoint, Project, Visio and Word and CAD) Categories
applicable
(E,P, P, V,W,C)
p454
Classifier Administration Server Guide UM644001
p455
Classifier Administration Server Guide UM644001
p456
Classifier Administration Server Guide UM644001
p457
Classifier Administration Server Guide UM644001
p458
Classifier Administration Server Guide UM644001
p459
Classifier Administration Server Guide UM644001
Index
-A-
Active Obsolete and Retained Selectors and values 145
Add a FLOT 353
Add a footer 353
Add a footer here 353
Add a header 353
Add a header here 353
Add a LLOT 353
Add a New Classification 328
Add a New Clearance 412
Add a new condition 178
Add a new Default Label 336
Add a new Dynamic Clearance 415
Add a new email domain clearance 408
Add a new expression 168
Add a new image 94
Add a new label configuration 128
Add a new marking format 148
Add a new matcher 171
Add a new message 98
Add a New Policy 256
Add a new policy role 53
Add a new selector 131
Add a new UI definition 101
Add a Question 190
Add a rule 341
Add a selector 315
Add a User or Group To a Role 47
Add a watermark 353
Add an attachment list 353
Add Header / Footer additional notes 366
Add rules 353
Add these addresses 353
Add this custom property 353
Add this document property 353
Add this image as a watermark 353
Add this image into footer 353
Add this image into header 353
Add this image to bottom of page 353
Add this image to top of page 353
Add this x-header 353
Add to subject 353
Administrator Management Menu 44
Algorithm for finding the text to display 83
Align Text 161
Allow classification of meeting requests and appointments 204
Allow classification of tasks 204
Allow Folder View labelling 206
Allow Folder View labelling 206
Allow label change on protected documents 206
Allow manual upgrade when sending messages 206
Allow use of OWA Basic/Light Mode 207
Allow visual markings on a meeting request response 207
AllowClassificationHistoryClear 436
Always use distribution list clearances 207
Appendix - Address Book to AD attribute mapping 458
Appendix - Auditing Event Messages 450
Appendix - BJTrace Logging Facility 449
Appendix - Content Checking File Types Supported 457
p460
Classifier Administration Server Guide UM644001
-B-
Base Colour 276
Bottom Pane 200
Browser Support (OWA) 421
Buttons (Selector values) 143
-C-
Cache Active Directory attributes on start-up 227
Caption Placement 277
Challenge (UID) 104
Check Attachments/Recipients/Originator - Warn / Prevent 405
Check clearance for attachments, recipients or originator 387
Check clearance for originator
Check clearance for recipients 387
Check content 389
Check for additional recipients on reply or forward
Check for Author label change 380
Check for label change 382
Check for Reply to All response 392
Check for RMS protection 398
Check for the high-water mark 384
Check for these recipients 391
Check for unlabelled attachments 394
Check for use of default label 392
Check Label Locations first 228
Check message size 388
Check number of recipients 390
Check RMS user defined permissions for uncleared recipients 398
Check rules 377
Check subject length 388
Check subject length does not exceed 388
Check subject length exceeds 388
Check these mandatory selectors 379
Check these selectors for expired dates 393
p461
Classifier Administration Server Guide UM644001
-D-
Date Format 153
Date offset list 139
Date offset list options 303
p462
Classifier Administration Server Guide UM644001
-E-
Edit (Rule) 346
Edit Available Answers 198
Edit Classification 330
Edit email domain clearance 410
Edit Selector 134
Edit selector options 317
Email Domains 407
Email, OWA, Mail Add-in, Notes and Mobile Differences 418
Enable Back Button on Save As 210
Enable the Decision Tree Functionality 192
Ensure attachment markings are consistent 210
Ensure label dominates all portion markings 210
Example 1 - Categories with many Annotations 320
Example 2 - An additional user choice if Category 2 is selected 323
Example 3 - Separation of Personal and Corporate information 326
Examples of FLOT 371
ExcelAutoEnableDifferentFirstPage 437
ExcelAutoEnableDifferentOddEvenPages 437
Exchange Classifier Registry Locations 425
Extending the Active Directory Schema 439
-F-
Favourites 22
Features versus Licence 88
File Classifier (UID) 110
File Classifier Registry settings 438
p463
Classifier Administration Server Guide UM644001
-G-
General Messages (UID) 114
General Settings 224
Get Server Configuration 59
Global Settings 76
-H-
HWMCheckEmbeddedOfficeDocuments 436
-I-
IgnorePasswordProtectedZips (Ignore Password Protected Zip Files) 436
Image to Apply 280
Include embedded images when performing attachment checks 212
Indicate mandatory selector check failures 237
Insert a Question into the Decision Tree 196
Insert Label 15
Insert Marking as Field Code (Word only) 15
Inserting a Directory Attribute 160
Inserting a Document Property 158
Inserting a Hyperlink 156
Inserting a Selector Element 150
Inserting an Environment Property 157
-L-
Label 130
Label Configuration Registry settings
Label Dominance 146
Label integrity check failure error message 237
Label Locations 248
Label Options 38
Label Preview 292
Label Propagation 13
Label Selection (UID) 115
Label Selection Dialog 19
Label Selection Interfaces 17
LabelConfiguration 432
LabelConfiguration (Label Configuration Name) 431
LabelConfiguration (Service Mode Label Configuration Name) 431, 433
Labelling Configurations 127
Language (Message) 99
Language (Policy) 313
Language (Selectors) 134
Languages 83
Licence 86
Licence file names 86
Link to site defined help 39
Lock / Unlock Policy 292
-M-
Management Agent (UID) 117
Mandatory Selectors 14
Marking 147
Marking Format 147
p464
Classifier Administration Server Guide UM644001
-N-
New (Selector value) 141
Notes Classifier vs Email Classifier 420
-O-
Obsolete / Restore Selector 144
Organise Favourites (UID) 119
OWA Classifier and Classifier Mail Add-in vs Email Classifier 419
-P-
Perform Clearance Checks when sending messages 405
Permissions for Publish to AD 63
Plugins 445
Policies 253
Policy 432
Policy (Policy Name) 431
Policy (Service Mode Policy Name) 431, 433
Policy Check (UID) 120
Policy Label UI 295
Policy Management 253
Policy Name and Description 260
Policy User Interface Settings 275
PolicyFileClassifier 9, 432
PolicyFileClassifier (File Classifier Policy Name) 431
PolicyOutlook 9, 432
Portion Mark 23
Portion Marking 213
PowerPointSlideMarkings 9, 437
Preview a Marking Format 161
Printable Labels 14
Process rules when exporting 216
Process rules when printing 216
Process rules when saving 216
Prompt for reason for ignoring policy warning 238
Properties (Classifier Administration) 59
Properties (Clearance) 413
Properties (Condition) 180
Properties (Default Label) 336
Properties (Dynamic Clearances) 417
Properties (Expression) 169
Properties (Image) 95
Properties (Label Configuration) 129
Properties (Marking Format) 148
p465
Classifier Administration Server Guide UM644001
-Q-
Question Library 186
Question Properties 189
-R-
Recently Used Labels and Portion Marks 24
Recognising and Parsing Label Markings 250
Recognition of received Label values 14
Registry Keys set by Group Policy 431
Registry Settings 432
Removable Visual Markings 367
Remove a Node 195
Remove Classifier Options from the Ribbon Bar 238
Remove selector 316
Rename Favourite 22
Retained 312
Ribbon 307
Ribbon (UID) 122
Ribbon Examples 18
RMS Apply Template (UID) 124
RMS Apply User Permissions (UID) 125
Rule Icons 345
Rule overlap handling 351
Rules Management 337
Rules supported 352
Rules wizard operation 343
-S-
Search for Outlook Item Properties that match email label locations 217
Select value for Masked Selector 239
SelectableFilesLimit (Selectable Files Limit) 438
Selector 130
Selector Actions 131
Selector Library 130
Selector Properties (Policy) 296
Selector Properties / General 297
Selector Properties / Options 298
Selector Value Filtering 305
Selector Values 130
Selectors in policy 306
ServerFileSystemRoot 9, 432
ServerFileSystemRoot (File Based Configuration Location) 431
ServerFileSystemRoot (Service Mode File Based Configuration Location) 431, 433
ServerRootType 9, 432
ServerRootType (Configuration Distribution Server Type) 431
ServerRootType (Service Mode Configuration Distribution Server Type) 431, 433
Service Mode Registry Settings 433
Set a Label 199
Set property to refresh markings 217
Set Rules Tab 340
Set the Registry Keys directly 425
Set the Registry Keys using Group Policy 426
Settings 273
Settings Applicable Across the Organisation 76
p466
Classifier Administration Server Guide UM644001
-T-
Tab Placement 287
Tabs 307
Test Mode Administration 71
Text Display 151
Text displayed when a distribution list fails to expand 241
Text displayed when an item without a label cannot be checked into SharePoint 221
Text displayed when attachment check failed to complete 242
Text displayed when Folder View labelling fails 242
Text displayed when mandatory label is absent 242
Text displayed when originator check failed to complete 243
Text displayed when OWA Basic/Light Mode is disabled 221
Text displayed when prompting for a reason for ignoring policy warnings 243
Text displayed when recipient check failed to complete 244
Text displayed when RMS protection failed to complete 244
Text displayed when S/MIME application failed to complete 244
Text entry 138
Text entry options 303
Text to display for notifying of policy checks performed 244
Text to display for resolution of policy issues 245
Text to display if attachment markings are inconsistent 246
Text to display if no marking is available 246
Title Colour 289
-U-
Update markings when indicated 221
URL for your labelling help site 247
Use Alternate Data Stream (ADS) for Visio files 247
Use Alternate Data Stream (ADS) marking 222
Use Assisted Labelling 260
Use Decision Tree 262
p467
Classifier Administration Server Guide UM644001
-V-
ValidityPeriod 9, 432
ValidityPeriod (Downloaded Configuration Validity Period) 431
View Client Licence status 92
Visual Markings Controlled by the User 371
-W-
Warn / Prevent / Audit / Challenge options for Check rules
Warn if file contents cannot be accessed 222
Watermarks use marking format font 223
Web Host Settings 435
WebClientTimeout 435
WebConfigKey 435
WebServerCertificateValidation 435
WebServerConfigFile 435
What is a Rule? 338
WordAutoEnableDifferentFirstPage 9, 437
WordAutoEnableDifferentOddEvenPages 9, 437
p468