Loading...

Microsoft Edge enforces screen capture restrictions for sensitivity-labeled PDFs in OneDrive and SharePoint

Microsoft Edge enforces screen capture restrictions for sensitivity-labeled PDFs in OneDrive and SharePoint

Microsoft Edge will enforce “Do Not Allow Screen Capture” restrictions on sensitivity-labeled PDFs in OneDrive and SharePoint web viewers starting August 2026. This aligns web behavior with desktop, enhancing data protection for Microsoft Purview Information Protection users. Organizations should review labels, update documentation, and encourage Edge use for compliance. What and Why: We are enhancing protection for sensitive documents by enforcing the Do Not Allow Screen Capture permission in the OneDrive and SharePoint web PDF viewer when accessed through Microsoft Edge. This update closes a known gap where browser-rendered PDFs did not enforce this Microsoft Purview Information Protection (MIP) control, aligning the web experience with desktop behavior. This improvement strengthens enterprise data protection and helps ensure sensitive content remains secure across access points. Rollout Schedule: Targeted Release: Beginning in early August 2026 and expect to complete by mid-August 2026 General Availability (Worldwide): Beginning in mid-August 2026 and expect to complete by late August 2026 Impact on Your Organization: Who is affected: Organizations using Microsoft Purview Information Protection sensitivity labels Users opening labeled PDFs in OneDrive or SharePoint via Microsoft Edge Platforms/Services: OneDrive for Business (web) SharePoint Online (web) Microsoft Edge What will happen: Screen capture will be blocked for PDFs labeled with Do Not Allow Screen Capture. Enforcement is on by default where applicable. Existing sensitivity labels and policies are respected. No impact to unlabeled PDFs or labels without restrictions. Other browsers and mobile web are not supported at general availability. Users accessing protected PDFs outside Edge may not have consistent enforcement. Action Required/Recommendations: Review sensitivity labels that include Do Not Allow Screen Capture to confirm intended usage. Update internal helpdesk and user documentation to explain why screenshots may be blocked. Communicate this change to users, especially those handling sensitive documents. Evaluate Conditional Access or browser management policies to ensure protected PDFs are accessed via Microsoft Edge. Enable Microsoft Purview Information Protection support in Edge by following guidance: Configure MIP in Edge Compliance considerations: Area Explanation Information Protection labels (Purview) Existing sensitivity labels are more strictly enforced by extending screen capture restrictions to the Edge web viewer experience. Conditional Access policies […]

The post Microsoft Edge enforces screen capture restrictions for sensitivity-labeled PDFs in OneDrive and SharePoint appeared first on M365 Admin.

Published on:

Learn more
Need help with this product?

We can help you with Microsoft Edge enforces screen capture restrictions for sensitivity-labeled PDFs in OneDrive and SharePoint

If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.

M365 Admin
M365 Admin

by João Ferreira

Share post:

Related posts

Microsoft Entra ID: Risk-based anti-bot verification (CAPTCHA) for SMS and voice multi-factor authentication

Starting mid-November 2026, Microsoft Entra ID will add risk-based CAPTCHA verification for SMS and voice MFA to prevent automated fraud. Some...

9 hours ago

[Outlook for iOS and Android] Copilot Chat in Outlook UX improvements

Copilot Chat in Outlook for iOS and Android is being updated with a refreshed, consistent design across Microsoft 365 apps, improved chat inte...

9 hours ago

Microsoft Word: Retirement of legacy compatibility settings

Microsoft Word will retire legacy compatibility settings for documents in Compatibility Mode starting December 2026 (Windows) and early 2027 (...

9 hours ago

Power Platform – Information regarding the end of support for SharePoint temporary authentication URLs

Starting April 1, 2027, SharePoint temporary authentication URLs will be retired. Power Apps and Automate functionality that relies on these U...

9 hours ago

Windows Office Hours: November 19, 2026

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live ...

9 hours ago

Scheduled prompts in Microsoft 365 Copilot are moving to native Copilot scheduling and the Tasks view

Microsoft 365 Copilot is moving scheduled prompts from Power Platform to native Copilot scheduling, enabling automatic execution of one-time o...

9 hours ago

Prevent issues with NetApp SMB shares: Learn about new Windows Server security requirements

Microsoft introduced additional security requirements for LDAP authentication on Active Directory domain controllers starting with the October...

9 hours ago

60-day reminder: Hardening changes for ReFS volumes on removable media

Microsoft is making hardening changes to the Resilient File System (ReFS). The changes improve the security posture of Windows by adding visib...

9 hours ago

Microsoft 365 Copilot: Copilot Workspaces is replacing standalone agent selection with agentic chat

Microsoft 365 Copilot Workspaces will replace standalone agent selection (Researcher, Analyst, Designer) with an agentic chat that applies ski...

9 hours ago

Microsoft Teams: Updated recording and transcript access setting behavior for town halls and webinars

Microsoft Teams is updating the “Who has access to the recording or transcript” option for Events App town halls and webinars. It ...

9 hours ago

Newsletter

Get the latest Dynamics 365 and Power Platform content in your inbox

A curated digest of community blogs, product news, videos, and podcasts — delivered without the noise.

Weekly updates Unsubscribe anytime Fresh community picks
We use your email only for the newsletter and you can unsubscribe at any time.
By subscribing, you agree to the privacy policy.