Prevent company Azure AD users to open encrypted documents from their own home computers

[ShetlerV]

I want to start using Azure Information Protection so that internal company documents cannot be opened on non-corporate computers.

However, by default, the system does not work as expected.

Now employees can using their Azure AD login and password can log in to their home computer in “MS Office” or “Azure Information Protection Viewer” and open corporate encrypted documents.

Tell me how to make sure that employees cannot open encrypted documents from a home computer through “Azure Information Protection Viewer”, “Azure Information Protection”, “Microsoft Office”, but can still connect to “Azure Virtual Desktop” through “Remote Desktop”.

[#2]

Hello Vladimir, Your will probably find this article helpful. https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy