Intune WIP Outlook and Encryption

Question

Silly question. So say we have WIP deployed (just got it working today). if all content downloaded from a protected space is encrypted, how would one go about sending legitimate attachments in outlook? Would not that attachment be encrypted with the 3rd party not having the requisite access as a result?

Or does Outlook know to not send it encrypted as it is enlightened? And that is where WIP is not designed against malicious intent?

Sorry ran out of devices to test on!

Answer 1

@Anonymous Thanks for posting in our Q&A.

For this issue, if the Outlook is a protected app, it will not block Outlook to send encrypted data to others and others can see the content of the data.

Based on my understanding, WIP just limits the unprotected app to get and send encrypted data and doesn't limit protected apps's action.

WIP is not a comprehensive solution to prevent from accidentally disclosing info. To protect against both accidental or deliberate data disclosure, you should implement Microsoft DLP:
https://techcommunity.microsoft.com/t5/security-compliance-and-identity/announcing-microsoft-endpoint-dlp-general-availability/ba-p/1814010

Thanks for understanding.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.