Forum Discussion
How to block users from downloading files in the Teams or Outlook app on a windows desktop?
I am only seeing EDGE as something to configure in the application protection policy but I need a way to block downloading/copy/paste/print when using the fully installed teams/outlook application. D...
Windows Information Protection (WIP)
WIP allows you to restrict access to corporate data and block actions like copy/paste, download, or print in apps that are deemed untrusted.
Steps to configure WIP for blocking downloading and data sharing:
- Create a WIP Profile in Intune:
- Navigate to Microsoft Endpoint Manager Admin Center > Devices > Configuration Profiles.
- Click Create Profile.
- Platform: Windows 10 and later.
- Profile: Endpoint Protection > Windows Information Protection (WIP).
- Configure WIP Policy:
- Protected Apps: Add Microsoft Teams and Microsoft Outlook as protected apps.
- Network Boundary: Define your organization's trusted domains (e.g., company.com).
- Data Sharing Settings:
- Prevent cut/copy/paste between protected and non-protected apps.
- Restrict file sharing: Disable the ability to download or share files outside protected apps.
- Assign the Policy:
- Assign the WIP profile to the devices or users that require the restriction.
Key WIP Restrictions:
- Block copy/paste between protected apps and non-protected apps.
- Prevent printing from protected apps.
- Disable sharing data with non-protected apps (which also impacts file downloads).