Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,595 questions
How are you configuring your network boundaries?
Windows Information Protection and netowrk shares
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 92%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELJ%3C/text%3E%3C/svg%3E)
Leo Johnson
151
Reputation points
Hello everyone,
One of our customer asked us to setup Windows Information Protection.
It works on Onedrive and Teams.
But we need also protection for the network share. This does not work at all.
Tried playing around with network boundries, but no luck.
How is it possible to encrypt files copied from a network share?
Thanks,
Leo
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
Crystal-MSFT 42,796 Reputation points Microsoft Vendor2021-01-29T02:23:26.863+00:00 @Leo Johnson , For the Network Boundary, did we configure the file share server ip in the IPv4 ranges. If not, please let us know how did we configure the network boundary, Here is an article describe the details of it for your reference:
https://learn.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure#choose-where-apps-can-access-enterprise-dataHope it can help.
-
Leo Johnson 151 Reputation points
2021-01-29T07:04:43.413+00:00 We entered all our domains in "Network Domains" and all our ip's in "IPv4 ranges".
Example: domaincorp.com,localaddomain.local,domain.onmicrosoft.com,server001.localaddomain.local,server001.domaincorp.com
Example: 192.168.1.1-192.168.1.254,192.168.1.200-200Network share is still not changed to "Corporate Owned".
-
Crystal-MSFT 42,796 Reputation points Microsoft Vendor
2021-01-29T09:39:38.993+00:00 @Leo Johnson , For Windows Information Protection (WIP) policy. we can choose which apps to protect, the level of protection, and how to find enterprise data on the network. For the file in the file share, we need to open with a protected app and then save the file in this location to make it encrypted, After that, when others copy the file from this file share to other location, the operation will be rejected with the following message:
-
Crystal-MSFT 42,796 Reputation points Microsoft Vendor
2021-02-04T05:28:15.207+00:00 @Leo Johnson , How's everything going? I am writing to see if there's anything else we can help. if yes, feel free to let us know.
Sign in to comment
1 answer
Sort by: Most helpful
-
Rahul Jindal [MVP] 9,131 Reputation points MVP2021-01-28T21:51:12.243+00:00 -
Leo Johnson 151 Reputation points
2021-01-29T07:04:51.343+00:00 We entered all our domains in "Network Domains" and all our ip's in "IPv4 ranges".
Example: domaincorp.com,localaddomain.local,domain.onmicrosoft.com,server001.localaddomain.local,server001.domaincorp.com
Example: 192.168.1.1-192.168.1.254,192.168.1.200-200Network share is still not changed to "Corporate Owned".
Sign in to comment -