Hi y'all, In our test environment we are trying to setup Windows Information Protection with Enrollment. Everything works like a charm: from Edge and the Office apps all corporate data is recognized as such and downloads of data are encrypted. But, when using Chrome and Office Online, Chrome won't reconize corporate data and everything is downloaded without encryption. What am I missing?

@Leo Johnson Thanks for your explain. As RahulJindal said, I add chrome as a protected app. Name: chrome Publisher: O=GOOGLE LLC, L=MOUNTAIN VIEW, S=CA, C=US Type: Desktop Apps Action: Allow Others are all set to "*" Then I access the office online portal via chrome and download the attachment. I find that the attachment is downloaded with encryption. So it is suggested to try. If the response is helpful, please click "Accept Answer" and upvote it.

@Leo Johnson Thanks for posting in our Q&A. For this issue, we appreciate your help to collect some information: Please show the screen shot of the settings in Windows Information Protection. Please open the chrome app and then check if the enterprsie context for Chrome isn't personal in Task Manager > Details. If there is anything update, feel free to let us know. If the response is helpful, please click "Accept Answer" and upvote it. Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Chrome is an unenlightened app and you will need to add it to the list of protected apps in order to protect corporate data.

Windows Information Protection - Chrome won't reconize corporate data

Accepted answer

Lu Dai-MSFT 28,356 Reputation points

2021-03-22T09:08:35.927+00:00

@Leo Johnson Thanks for your explain.

As RahulJindal said, I add chrome as a protected app.

Name: chrome
Publisher: O=GOOGLE LLC, L=MOUNTAIN VIEW, S=CA, C=US
Type: Desktop Apps
Action: Allow
Others are all set to "*"

Then I access the office online portal via chrome and download the attachment. I find that the attachment is downloaded with encryption. So it is suggested to try.

If the response is helpful, please click "Accept Answer" and upvote it.
Please sign in to rate this answer.
Leo Johnson 151 Reputation points

2021-03-22T10:16:02.773+00:00

No this is not right!

Our users are opening Office Online Portal directly from the Chrome browser. Everything. like attachements from mail, files shared in Teams, are downloaded without encryption.

So again: the users are using Chrome browser only.

IWhen opening the Office Online Portal in Edge, than everyting is downloaded with encryption.

Lu Dai-MSFT 28,356 Reputation points

2021-03-23T09:14:18.05+00:00

@Leo Johnson According to your explanation, I have re-tested and modified my last answer. Please check. It is a reference. Thanks.

Lu Dai-MSFT 28,356 Reputation points

2021-03-25T06:46:05.827+00:00

@Leo Johnson I am currently standing by for further update from you and would like to know how things are going. If you have any questions or concerns on the recent information I've provided you, please don't hesitate to let me know.

If the response is helpful, please click "Accept Answer" and upvote it.

Leo Johnson 151 Reputation points

2021-03-26T09:08:44.897+00:00

Yes! This works!

But, a big but: All files downloaded from Chrome now marked a corporate data and will be encrypted!

How to prevent this behaviour?

Lu Dai-MSFT 28,356 Reputation points

2021-03-29T05:33:09.017+00:00

@Leo Johnson It's same as my test. Chrome is an Unenlightened apps. Based on my research, unenlightened apps consider all data corporate and encrypt everything.

Leo Johnson 151 Reputation points

2021-03-29T05:46:09.667+00:00

Okay, we are almost there: Used this weekend to test and corporate data is indeed encrypted.

But all downloads from Chrome are downloaded as corporate data, even private data.

Is this expected behaviour or am I missing something?

Thanks for all your help.

Lu Dai-MSFT 28,356 Reputation points

2021-03-29T05:57:04.137+00:00

This is expected behaviour.

Leo Johnson 151 Reputation points

2021-03-29T08:39:29.263+00:00

Okay final question: When a user enrolls it's own device in Intune, but keeps the browser open during this proces, all the files downloaded from this browser are still not recognized as corporate data. The browser has to close before WIP works.

Is this expected behaviour?

So the steps:

Open Edge

Keep Edge on the background open en connect corporate account in Settings -> Accounts -> Access work or school

Wait to finish the connection with Intune

Go back to Edge (which is still open in the background)

Login to office.com and download a file

Check result (my result: not recognized as corporate data)

Close Edge and try again, then finaly the corporate data is recognized as such.

Lu Dai-MSFT 28,356 Reputation points

2021-03-30T06:20:12.677+00:00

@Leo Johnson For this situation, I'm not sure if it is an expected behaviour.

Usually, we close the browser and then deploy the App Protection Policy. After checking that the policy is deployed successfully, we will open the browser to use.

If you are interested in this, it is suggested to open a case to confirm if it is an expected behaviour. It is free. The following link describes how to open a case, we can refer to it:
https://learn.microsoft.com/en-us/mem/intune/fundamentals/get-support

Thanks for understanding and have a nice day. : )

Leo Johnson 151 Reputation points

2021-03-30T14:00:59.803+00:00

Thanks for all the help, really appriciated!

Lu Dai-MSFT 28,356 Reputation points

2021-03-31T01:28:20.94+00:00

@Leo Johnson You are welcome. If you have any problem in the future, welcome to post in our Q&A. I'm glad to discuss with you.

Hope everything goes well with you. : )
Sign in to comment