question

Marcus-9726 avatar image
0 Votes"
Marcus-9726 asked Jason-MSFT answered

Windows Information Protection Microsoft Outlook to Personal Email

I've deployed WIP in my environment, copy paste feature or uploading document is functioning. However, I found out that I can still attach work document in my Outlook and send to my personal email. Then I can download the doc from my personal email and edit it. Current configuration on devices are Intune and MDM enrolled. Azure AD joined as well.

Anyways that we can restrict this behavior?

mem-intune-generalmem-intune-application-management
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered Marcus-9726 edited

@Marcus-9726 Thanks for posting in our Q&A. From your description, did you mean that you didn't want to send the protected attachment to personal email? If there is any misunderstanding, feel free to let us know.

To clarify this issue, we appreciate your help to collect some information:
1.Could you please tell us where did you get the attach work document?
2.Please show the screen shots of the WIP configurations.

If there is anything update, feel free to let us know.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @LuDaiMSFT-0289 ,

Yes, I do not want to allow users to be able to send work document to personal email like gmail/yahoo. Can this be achieved?

I do not have the access to intune portal at this moment but I could provide you the below information first.

We got the doocument from our sharepoint, once downloaded it will be a work protected document.

0 Votes 0 ·

Which browser did you use for accessing personal email? Have you added the browser as a protected app in your WIP policy?

0 Votes 0 ·
Marcus-9726 avatar image Marcus-9726 RahulJindal-2267 ·

Hi Rahul,

No, the situation is I'm using Microsoft Outlook which is the protected/enlightened apps to send an email with the work protected document as attachment. Isn't this abnormal while we are blocking copy/paste but then we can still send out the attachment using outlook to Gmail and open it to edit as personal document? This looks like a bypass to me where I can't copy paste work protected content to personal document but if I just simply send this document to my personal email and download it then I can do whatever I want with the document.

0 Votes 0 ·
Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

WIP is a best effort approach to keeping honest users honest and preventing them from accidentally disclosing info. It is not a comprehensive solution and was never meant to be (or can be).

To protect against both accidental or deliberate data disclosure, you should implement Microsoft DLP: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/announcing-microsoft-endpoint-dlp-general-availability/ba-p/1814010

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.