Enpoint DLP policy does not apply to synced OneDrive files that are using files on demand

Question

Any files that are in the "Cloud" status using the Onedrive sync do not have Endpoint DLP policies applied. This allows activities that would be blocked when the file is downloaded e.g. after the first time you open the document.

Is there a way to block this behavior or is the only solution to disable OneDrive files on demand.

Answer 1

Hi,

I suggest you check if this article is helpful:

https://learn.microsoft.com/en-us/purview/dlp-configure-endpoint-settings#auto-quarantine

Just checking in to see if the information was helpful. Please let us know if you would like further assistance.

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.