Forum Discussion
VKantamneni
Jan 13, 2020Brass Contributor
Blocking download files with sensitive data from desktop client Apps on non-domain joined systems
What is the best way to block downloading files with sensitive data on to non-domain joined personal desktops using desktop client apps (Outlook, One Drive, Teams...). Using Conditional access po...
VKantamneni
Feb 03, 2020Brass Contributor
Thank you Shlomi,
We have already applied this settigns. However, we don't want to block all downloads, just want to restrict downloading sensitive data onto non-domain joined PCs ( personal PCs).
Fananico
Feb 03, 2020Copper Contributor
Hi,
what are you considering as sensitivity data?
is it based on information protection labels, PII, PCI data?
Thx,
Shlomi
- VKantamneniFeb 04, 2020Brass Contributor
- FananicoFeb 04, 2020Copper ContributorHave you tried using session policy, configured to trigger for non domain joined devices or no compliant devices and trigger a block download based on DLP?
- VKantamneniFeb 04, 2020Brass Contributor
Yes, session policies applied for browser based access only. applied and working fine for browser sessions. Desktop client apps not blocking.