Microsoft Intune solution : Not able to Download/save any data

int86

You'r born free
Contributor
My organisation uses Microsoft Intune solution/Microsoft Entra ID. I access my official mail at home PC occasionally through mandatory configuring EDGE for my work/official profile. I am able to access mail at https://outlook[dot]offi[]ce365[dot]com through work profile in EDGE.
only.
I can access mail but neither able to print anything or download any attachment.

Anybody have any solution then please guide. I would like to save pdf and excel attachments. Following popup always stops. My company wont help any further

Even if I open other site in EDGE under same work profile, say google, then also not able to copy any text.

1741998029524.png
 
Last edited:
Trying to bypass company protections could be grounds for a warning or more severe punishment. Would advice to have a word with someone from IT.

Secondly, the system might have been setup with Conditional Access with Information Rights policies to prevent you from copying data on non company devices which is out of control, like your home PC

Coming to the bypass - you need to tinker around in developer tools to identify the source of the file and try to download from there.
 
Coming to the bypass - you need to tinker around in developer tools to identify the source of the file and try to download from there.
How to proceed for to download any excel or pdf file. Even copy and paste through mouse drag do not work. there must be some work-around. I can take screenshots but those are not productive, just time waste
Even if I open other site in EDGE under same work profile, say google, then also not able to copy any text.
 
Last edited:
Intune architect here. While I mostly work on mobile devices. Below holds good for desktops too.

Your organisation is has applied App protection policy on your Edge browser. Am assuming you organisation has MAM-WE-ish setup that allows you to login from any device that meets their requirements.

The following controls are set under the policy.

These settings prevent you from performing copy-paste of text or download files to local storage.

Setting name: Data Transfer
Setting description: Send Org Data to other app
Value: None or policy managed apps

Setting name: Data Transfer
Setting description:Allow cut, copy, and paste for
Value: None or organisation managed app

Setting name: Functionality
Setting description: Print org Data
Value: Block

Trying to break the browser and attempt to login. You could get blocked by compliance policy or conditional access. Even if you are successful. The documents could be still protected under Information rights (microsoft purview)

To bypass this while not getting into trouble. Your organisation needs to create a new protection policy with far more relaxed controls allowing you to print or download documents. This would obviously need you to go through justifying the boss, Information security, client and other stake holders,etc
 
  • Like
Reactions: ibose and axeman
Trying to break the browser and attempt to login. You could get blocked by compliance policy or conditional access. Even if you are successful. The documents could be still protected under Information rights (microsoft purview)

To bypass this while not getting into trouble. Your organisation needs to create a new protection policy with far more relaxed controls allowing you to print or download documents. This would obviously need you to go through justifying the boss, Information security, client and other stake holders,etc

My organisation has 1lac+ employees, so cant reach upto top information security officer, who holds everything. For pdf I manage to take screenshot on mobile or PC and manually paste it. But real hinderance I follow is with large excel files like 300 rows,

Kuch to solution hoga. Like if I open attached excel in EDGE, somewhere is disk it would get buffered.
 
My organisation has 1lac+ employees, so cant reach upto top information security officer, who holds everything. For pdf I manage to take screenshot on mobile or PC and manually paste it. But real hinderance I follow is with large excel files like 300 rows,

Kuch to solution hoga. Like if I open attached excel in EDGE, somewhere is disk it would get buffered.
Entra is doing what it is set up to do, block downloads on unmanaged devices as per policy. The entire idea is to prevent company files from landing on personal devices and in worst case, being accessed by malware on devices whose security is unknown.

Many corporates simply use a cloud PC for such use cases, though that is of course a more expensive solution. You are meant to access those files on a managed device, so no one is really going to help out from the company. Can't see them relaxing such a policy.
 
  • Like
Reactions: ibose
Entra is doing what it is set up to do, block downloads on unmanaged devices as per policy. The entire idea is to prevent company files from landing on personal devices and in worst case, being accessed by malware on devices whose security is unknown.

Many corporates simply use a cloud PC for such use cases, though that is of course a more expensive solution. You are meant to access those files on a managed device, so no one is really going to help out from the company. Can't see them relaxing such a policy.
Yes my company uses Cloud PC. What I can see on my PC, cant I save, Kuch toh trick hoga