How to block Save As option in Microsoft 365

Samuel Peña 1 Reputation point
2023-07-28T16:05:52.4566667+00:00

I can restrict document downloads in Microsoft 365 applications with Microsoft Defender for Cloud Apps. However, when I open a document with a client, the Save As option is enabled. How can I prevent this action?

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,217 questions
Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps
A Microsoft cloud access security broker that enables customers to control the access and use of software as a service apps in their organization.
118 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Byron Dittberner 0 Reputation points
    2023-08-01T01:52:11.0333333+00:00

    To control the "Save As" functionality, you would need to use a combination of Microsoft Information Protection (MIP) and Data Loss Prevention (DLP) policies. Here's a general guide on how you can set this up:

    1. Create a Label in Microsoft Information Protection (MIP):
      • Go to the Microsoft 365 compliance centre.
      • Navigate to "Solutions > Information protection".
      • Click on "Create a label" and follow the instructions to create a new label. You can specify the settings according to your needs.

    Apply the Label to your Documents:

    • Once the label is created, you can apply it to your documents. This can be done manually within the document, or you can set up an auto-labeling policy.
    1. Create a Data Loss Prevention (DLP) Policy:
      • Go back to the Microsoft 365 compliance centre.
      • Navigate to "Policies > Data loss prevention".
        • Click on "Create a policy" and follow the instructions to create a new policy. In the policy settings, you can specify that the labelled documents cannot be downloaded or shared outside your organization.

    Apply the DLP Policy:

    • Once the DLP policy is created, it will automatically apply to all documents with the specified label.

    This setup will prevent the labelled documents from being downloaded or shared outside your organization, but it won't disable the "Save As" option within the client applications. However, even if a user tries to "Save As" and save the document outside the organization, the DLP policy will prevent it.

    0 comments