question

JeanHaley-9988 avatar image
0 Votes"
JeanHaley-9988 asked LuDaiMSFT-0289 commented

Briefcase icon overlays in OneDrive local folders (how to disable Windows Information Protection)?

I have several computers with Windows 10 as the operating system. On all computers, I have installed OneDrive which is connected to a business account. On all computers except one there are no problems with OneDrive. The non-problematic computers are non-corporate installations (Windows 10 Pro). However, on one computer (Windows 10 Enterprise, with Intune management) all folders inside the local OneDrive folders' icons have a briefcase overlay on the top-right corner.

What I don't understand is these briefcases do not appear on the same exact files (same OneDrive account) on the non-corporate computers. When the briefcase icon appears, it causes a 10 second delay when double clicking the file. Nothing happens, then "How do you want to open this work file?" appears. That happens every single time. It will NOT remember what to open with, no matter what.

What explains this behavior? How to get rid of that Work file status (as it evidently is possible on other computers)? Or at least, how to make the open with status permanent ("Choose default apps by file type" does not help, that has no effect on the problem)?

mem-intune-generaloffice-onedrive-client-itpro
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

NickHogarth-MVP avatar image
0 Votes"
NickHogarth-MVP answered

Sounds like you are using Windows Information Protection policies and OneDrive is running in Enterprise mode. Are these policies configured in Intune? https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure#create-a-wip-policy

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered

@JeanHaley-9988 Thanks for posting in our Q&A.

For this issue, we appreciate your help to check if the OneDrive in this Windows 10 Enterprise device is protected by intune(Task manager->detail->right click, select column->enterprise context). Check if the OneDrive's Enterprise context shows the tenant. For example:
126601-image.png

If there is anything update, feel free to let us know.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (309.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JeanHaley-9988 avatar image
0 Votes"
JeanHaley-9988 answered LuDaiMSFT-0289 commented

Yes, on the problematic computer, the Enterprise context for OneDrive.exe is "COMPANYNAME (Enlightened, Permissive)". Others are either "Personal" or "Exempt".

On the other computer with no problems, all files are "N/A". (The OneDrive account is the same.)

What does it mean when it's N/A? OneDrive is not protected (so it seems)? What is the point of having more protection on a corporate computer which is already more protected anyway, as opposed to my home computer. Both are handling the same OneDrive content.

Is it a bug that "open with" is asked every time or why does that happen?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@JeanHaley-9988 Yes, NA means OneDrive is not protected. The problematic device is managed by intune and OneDrive app in this device is protected.

The difference between the same OneDrive app in different devices is related to the settings in the app protection policy configured by your organization. We can find the benefits of app protection policy in the following link:
https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy#benefits-of-using-app-protection-policies

It is suggested to remove your user account from the policy assignment group. When the Enterprise context doesn't show "COMPANYNAME", please check if "open with" is still asked.

0 Votes 0 ·
JeanHaley-9988 avatar image
0 Votes"
JeanHaley-9988 answered LuDaiMSFT-0289 commented

Thanks for the help. Your suggestion is not possible via local admin account, but the Intune manager status is needed, correct? I don't have the possibility for that. I do have the local admin account so I could, of course for example install a virtual desktop and install OneDrive there. Then I think it wouldn't have the briefcase problem. But that environment is of course too slow for getting work done.

Is there a trick I could do, that works with the local admin rights?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@JeanHaley-9988 It is suggested to try to disconnect the Work or School account. This action will remove the device from intune.
Note: Please confirm with the company IT whether this computer is owned by the company and whether this operation can be performed.

If you want that the device is manged by intune and disable windows information protection policy, I think there is no method can make it.

Hope it will help.

0 Votes 0 ·