Blocking sensitivity labels applied files from personal desktops


We have migrated ARM labels to unified labels and created few MIP Sensitivity labels in Compliance center and using Conditional access MCAS policy to block files applied sensitivity labels from non-AzureAD Joined computers.

However, we are not able to block these files from opening from non-domain joined computers. Able to block downloads using Conditional access MCAS policy, however not able to block cut/past or blocking opening sensitivity label applied office document.


Any guidance is much appreciated...


Thanks in advance

0 Replies