Forum Discussion
Prevent users from making copies of SharePoint/OneDrive data that was downloaded via sync app
- you may want to take a look at Windows Information Protection, which is native in Windows 10 from release 1607, and takes policies defined in Intune or SCCM
https://blogs.technet.microsoft.com/windowsitpro/2016/06/29/introducing-windows-information-protection/
https://blogs.technet.microsoft.com/cbernier/2017/05/19/windows-information-protection-explained-windows-10-creators-update/
Consider using IRM.
OneDrive sync on Windows now supports IRM protected SharePoint document libraries:
IRM can limit actions on downloaded files for users with Read Only permissions, but users with Edit or Full Control will be able to take the data wherever they want
If necessary, access to IRM protected documents can be revoked, which is what Marcelo Gonzalez needs, if I understand well...
- I think they want users to work normally on their synced files, but prevent them from taking the data somewhere else. You cannot do that with IRM.
That's correct, Pablo. The goal is for users to work normally on their synced files, but prevent them from taking the data somewhere else by making copies of it. It's very hard to strike such balance, as users want to work with their data locally, but we don't want them to make copies of it.
So, even with Windows 10 + IRM, users will still be able to copy the data huh?
