Forum Discussion
Block Downloads, Copy and Paste from M365 Windows Apps on Unmanaged Devices
Is it possible to prevent the download, copy and paste of data on Windows 10 Unmanaged devices that have the Office 365 Windows Apps installed? I have been able to get this working with the web-based...
Keith_Fleming
Microsoft
MicrosoftChrisGrout this should be possible using Defender for Cloud Apps and Purview. If you assign a site or group label you can used "app enforced restrictions" which is part of SPO. Set the label policy for sites and groups to allow web-only access, this will prevent the file from being opened in native clients or sync'd.
Use app-enforced restrictions - SharePoint in Microsoft 365 | Microsoft Learn
Then in combination use a session policy to block copy/paste.
Copy / print can be blocked on the endpoint itself using labels and groups, but the file itself would need to have the labeled applied.
- How secure is this? OK the download is blocked but is the data sandboxed or the like in the browser?
- Keith_Fleming
shockotechcom which particular scenario there are a few different ones described above?
