Forum Discussion
Download impossible despite IRM
Hi there,
I have activated M365 E5 Compliance and Enterprise Mobility & Security E5 IRM via Powershell and in SharePoint AdminCenter in my test client with the license. I then turned on IRM in the appropriate library:
When I open files in the Browser, IRM works:
But it is possible to open the file in the browser, which happens with my own private Account instead of the dummy user Adele Vance:
And when Adele just navigates to the library, she can also download the workbook and save it on my private desktop:
Does anybody know what I have to do to prevent files from beeing downloaded? Why does IRM not work in this case?
Thanks a lot in advance and kind regards,
Sophie
Hello,
I understand the major goal here is to prevent files from being downloaded, IRM may not be for that sole purpose but rather as a SharePoint or Global admin there is a new feature you can deploy to block download of files from SharePoint sites or OneDrive without conditional access policies. This can be set for individual sites and also from organizational level.
Kindly follow the below steps to test or setup this policy.
1. Download the latest version of PowerShell using this link https://go.microsoft.com/fwlink/p/?LinkId=255251
2. Connect to SharePoint as a Global Administrator or SharePoint Administrator by running the command Connect-SPOService -Url https://contoso-admin.sharepoint.com after which you would be prompted to authenticate.
3. Run the following command, Set-SPOSite -Identity <SiteURL> -BlockDownloadPolicy $true For example, Set-SPOSite -Identity https://contoso.sharepoint.com/sites/research -BlockDownloadPolicy $true
4.In any case you have some users or groups you would like to exempt from the policy so they can still download on the site, you can include this parameter -ExcludeBlockDownloadPolicy in the script. For Example, the parameter -ExcludeBlockDownloadPolicySiteOwners $true will allow Site Owners group download from the site regardless of the policy.
For more information on this feature which may be very helpful, you can look up the Microsoft documentation https://learn.microsoft.com/en-us/sharepoint/block-download-from-sites
Feel free to let me know if this helps.If I have answered your question, please mark your post as Solved
If you like my response, please give it a Like
Appreciate your Kudos! Proud to contribute! 🙂
Deleted thank yxou so much for your help! Unfortunately it does not work yet. Maybe because I don´t have the Microsoft Syntex advanced management license?
Here is a screenshot from my management Shell:
- Hi,
You should use sensitivity labels and not this IRM feature in Document Libraries that is considered as legacy
