Block downloads on devices not enrolled

[Mr_Jiminy]

Can anyone offer suggestions for how I go about restricting SharePoint/OneDrive file downloads outside on devices not enrolled with the organisation (school). I've been been able to at least set up a CA policy that blocks downloads to any device that is not compliant in Intune.

 

However, one way around this appeats to be selecting the 'Open in App' option, which then permits the end user to save a copy of the file to any local device. I do not want to remove the option for Open in App (if this is even an option) but do want to prohibit the saving to local devices.

 

I feel I am going around in circles (again!) looking at things like DLP, App Protection Polices, Labels etc. Is this even a possibility? Is it possible to disallow users from saving locally?

Edited November 6, 2024 by Mr_Jiminy

[mavhc]

browsing the web is causing many html files to be downloaded, so it seems unlikely you can block downloads

[Mr_Jiminy]

browsing the web is causing many html files to be downloaded, so it seems unlikely you can block downloads

 

Sorry, I'm referring to SharePoint/OneDrive files.

 

I've upaded my original post to reflect this.

[mavhc]

If you can view the file then you can download it, not specifically including MS online files perhaps, if you disabled allowing them to open in the desktop app