mcas url extention breaking Windows information protection policy

Srinidhi maiya 1 Reputation point
2020-11-02T14:59:21.227+00:00

HI All,

after configuring the MCAS the Windows information protection is no longer functioning for urls

before mcas following cloud network boundary was working find
contoso.sharepoint.com
contoso-my.sharepoint.com
contoso-files.sharepoint.com

after mcas configuration the url got changed to following and WIP is not applying on the URL
contoso.sharepoint.com.mcas.ms
contoso-my.sharepoint.com.mcas.ms
contoso-files.sharepoint.com.mcas.ms

I have added the above url in the sharepoint cloud app along with the original once (with out mcas.ms) but no luck

any suggestions

Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
909 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Crystal-MSFT 45,656 Reputation points Microsoft Vendor
    2020-11-03T01:57:59.57+00:00

    @Srinidhi maiya , From your description, it seems the URL with mcas configured is not working in WIP. If there's any misunderstanding, feel free to let us know.

    Research and find a customer who adds the MCAS Proxied URLs in both Protected Domains and cloud resrouce is working well. We sugges to add the URLS in the both locations:
    http://procloudguru.com/overcoming-wip-limitations-on-byod-w10-with-conditional-access-app-control-policies/
    Note: Non-microsoft link, just for the reference.

    After that sync on the device and see if it is working.

    However, if the issue stills perists, please follow the steps in the following link to troubleshoot:
    https://www.anoopcnair.com/troubleshooting-intune-wip-issues-checklist-1/
    Note: Non-microsoft link, just for the reference.

    Hope it can help.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  2. Crystal-MSFT 45,656 Reputation points Microsoft Vendor
    2020-11-04T01:27:22.787+00:00

    @Srinidhi maiya , Thanks for the reply. I am glad to hear that it is working now. Congratulations! If there's anything else we can help in the future, feel free to post in our Q&A. Here, please let me write a summary of our issue:

    Issue Definition

    ===================

    After configuring the MCAS, we add them into the cloud resource of WIP policy. But the WIP is not working.

    Resolution:

    ===================

    Add these urls that with mcas url extention in the protected domain as well. The WIP policy is working now.

    Thanks for your time and have a nice day!


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments