Windows Information Protection Microsoft Outlook to Personal Email

Marcus Wong Theen Nam 1,091 Reputation points
2021-09-09T05:57:59.887+00:00

I've deployed WIP in my environment, copy paste feature or uploading document is functioning. However, I found out that I can still attach work document in my Outlook and send to my personal email. Then I can download the doc from my personal email and edit it. Current configuration on devices are Intune and MDM enrolled. Azure AD joined as well.

Anyways that we can restrict this behavior?

Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
872 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,298 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Lu Dai-MSFT 28,341 Reputation points
    2021-09-09T07:26:15.843+00:00

    @Marcus Wong Theen Nam Thanks for posting in our Q&A. From your description, did you mean that you didn't want to send the protected attachment to personal email? If there is any misunderstanding, feel free to let us know.

    To clarify this issue, we appreciate your help to collect some information:

    1. Could you please tell us where did you get the attach work document?
    2. Please show the screen shots of the WIP configurations.

    If there is anything update, feel free to let us know.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. Jason Sandys 31,151 Reputation points Microsoft Employee
    2021-09-09T16:13:16.007+00:00

    WIP is a best effort approach to keeping honest users honest and preventing them from accidentally disclosing info. It is not a comprehensive solution and was never meant to be (or can be).

    To protect against both accidental or deliberate data disclosure, you should implement Microsoft DLP: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/announcing-microsoft-endpoint-dlp-general-availability/ba-p/1814010

    0 comments