Intune WIP Outlook and Encryption

Anonymous
2021-10-06T17:24:08.017+00:00

Silly question. So say we have WIP deployed (just got it working today). if all content downloaded from a protected space is encrypted, how would one go about sending legitimate attachments in outlook? Would not that attachment be encrypted with the 3rd party not having the requisite access as a result?

Or does Outlook know to not send it encrypted as it is enlightened? And that is where WIP is not designed against malicious intent?

Sorry ran out of devices to test on!

Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
909 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Lu Dai-MSFT 28,366 Reputation points
    2021-10-07T02:31:56.8+00:00

    @Anonymous Thanks for posting in our Q&A.

    For this issue, if the Outlook is a protected app, it will not block Outlook to send encrypted data to others and others can see the content of the data.

    Based on my understanding, WIP just limits the unprotected app to get and send encrypted data and doesn't limit protected apps's action.

    WIP is not a comprehensive solution to prevent from accidentally disclosing info. To protect against both accidental or deliberate data disclosure, you should implement Microsoft DLP:
    https://techcommunity.microsoft.com/t5/security-compliance-and-identity/announcing-microsoft-endpoint-dlp-general-availability/ba-p/1814010

    Thanks for understanding.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.