ProtectionPolicyManager.HasContentBeenRevokedSince(String, DateTime) Method

Reference

Definition

Namespace:: Windows.Security.EnterpriseData

Important

Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Edit

Note

Starting in July 2022, Microsoft is deprecating Windows Information Protection (WIP) and the APIs that support WIP. Microsoft will continue to support WIP on supported versions of Windows. New versions of Windows won't include new capabilities for WIP, and it won't be supported in future versions of Windows. For more information, see Announcing sunset of Windows Information Protection.

For your data protection needs, Microsoft recommends that you use Microsoft Purview Information Protection and Microsoft Purview Data Loss Prevention. Purview simplifies the configuration set-up and provides an advanced set of capabilities.

Use this method to check (for a known identity that is managed or ever was managed) whether access to protected data has been revoked since a specified date and time, or is still accessible. Note that the API returns true for an unknown identity (that is, an identity that has never been managed and is not currently managed). This is so that your app can clean up data associated with an identity for which there is no information. For more info, see Remarks.

public:
 static bool HasContentBeenRevokedSince(Platform::String ^ identity, DateTime since);

 static bool HasContentBeenRevokedSince(winrt::hstring const& identity, DateTime const& since);

public static bool HasContentBeenRevokedSince(string identity, System.DateTimeOffset since);

function hasContentBeenRevokedSince(identity, since)

Public Shared Function HasContentBeenRevokedSince (identity As String, since As DateTimeOffset) As Boolean

Parameters

identity: String
Platform::String

winrt::hstring

The enterprise identity protecting the data. This is an email address or domain that is managed. Your app should use IsIdentityManaged to confirm that an email address or domain is managed.

since: DateTime DateTimeOffset

The date and time from which point forward you want to include in the check.

Returns

Boolean

bool

true if access has been revoked since the specified date and time, otherwise false.

Windows requirements

Device family	Windows Desktop Extension SDK (introduced in 10.0.10586.0) Windows Mobile Extension SDK (introduced in 10.0.10586.0)
API contract	Windows.Security.EnterpriseData.EnterpriseDataContract (introduced in v2.0)

Remarks

Call this API only for an identity that has protected content on the device (in other words, for an identity that has been managed by Windows Information Protection (WIP)). Asking whether content has been revoked for an identity is only meaningful for an identity that has ever been managed by Windows Information Protection (WIP). Consequently, the answer returned from is meaningful only on the condition that the identity passed to the API has ever been managed by Windows Information Protection (WIP).

We recommend that your app maintains a log of the times it first protected data (files, buffers, or streams) associated with an identity. After this, you should call only if the identity has protected content associated with it on that device and your app wishes to know whether the protected content was revoked since the time it was protected.

is not intended to be used as a way to determine whether Windows Information Protection (WIP) was ever enabled and then revoked for an arbitrary identity, in other words as a retrospective-looking form of IsIdentityManaged.

Applies to

Dela via