Data Protection Issues

Can SharePoint DLP Prevent Downloading and Copying Files?

WPS Editor Oct 1, 2026 870 views

Question details

The user wants to know if SharePoint's Data Loss Prevention (DLP) and Information Rights Management (IRM) can fully prevent users from mass downloading, copying, or sharing files without authorization.

Can SharePoint DLP Prevent Downloading and Copying Files?

Product: Microsoft SharePoint
Device & OS: not provided
Scenario: Configuring document security policies in SharePoint to prevent data exfiltration, mass downloading, and unauthorized distribution of sensitive files.
Observed behavior: Seeking clarity on the capabilities and limitations of SharePoint DLP and IRM in stopping file downloads, local copying, and external sharing.

Before you start

Before modifying data protection policies, ensure you have SharePoint Administrator or Global Administrator privileges in your Microsoft 365 tenant to access the necessary DLP and IRM configuration settings.

Solution 1Recommended

Combine DLP with Information Rights Management (IRM)

Use Information Rights Management (IRM) alongside DLP to enforce stricter restrictions, such as requiring sign-in for downloaded files and blocking copying or printing.

Data Loss Prevention (DLP) alone cannot completely prevent users from downloading or copying files locally. Its primary function is to monitor and block the unauthorized sharing of sensitive data.

To prevent downloaded files from being copied or opened by unauthorized users, you must implement Information Rights Management (IRM). IRM encrypts the file at the library level, meaning restrictions travel with the document even after it is downloaded.

Access the Microsoft Purview Compliance Portal

Log in to the Microsoft 365 Admin Center using an administrator account and navigate to the Purview compliance portal to manage your DLP policies.

Enable IRM on a SharePoint Library

Navigate to the specific SharePoint site and open the document library. Click on 'Settings' (gear icon) > 'Library settings' > 'More library settings'. Under 'Permissions and Management', click on 'Information Rights Management'.

Configure Download and Copy Restrictions

Check the box to restrict permissions on documents in this library on download. Assign a policy title and description, then expand 'Show Options' to explicitly uncheck the ability for users to print, run scripts, or copy text from the downloaded files.

Combine DLP with Information Rights Management (IRM)

External Capture Limitations: Even with IRM enabled, users might still bypass restrictions using physical methods, such as taking photos of their screen with a camera or using specialized third-party capture tools.

Solution 2

Configure SharePoint Permissions and Sharing Limits

Limit who can access and share files by configuring strict site permissions, block download links, and domain restrictions.

Free Microsoft Office alternative

Try WPS Office for Secure and Lightweight Document Management

While managing complex SharePoint DLP policies requires advanced administrative access, WPS Office provides a lightweight, free alternative for everyday document creation and editing. It offers seamless compatibility with Microsoft formats and built-in local file protection, ensuring your teams can work securely without heavy overhead.

1. Download and Install: Visit the official WPS website to download and install WPS Office for free on your Windows, Mac, or mobile device.
2. Open Office Documents: Launch WPS Office and open your existing Microsoft Office files (.docx, .xlsx) directly with full formatting preservation.
3. Secure Your Files Locally: Go to the 'Protect' tab and select 'Encrypt' to add password protection and restrict editing or copying for your local documents.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Built-in document encryption and password protection to prevent unauthorized local file access.Lightweight design with a familiar, easy-to-use tabbed interface for seamless migration.Free to use for daily office tasks, significantly reducing software licensing costs.

microsoft office alternative - wps office

Frequently Asked Questions

Does SharePoint DLP block users from taking screenshots?

No. Neither SharePoint DLP nor Information Rights Management (IRM) can completely prevent users from taking screenshots using third-party screen capture tools, built-in operating system shortcuts, or external cameras.

Can I completely block users from downloading files in SharePoint?

Yes, you can generate 'Block Download' sharing links for specific files, or configure Conditional Access policies via Microsoft Entra ID to prevent downloads on unmanaged or external devices.

What is the primary difference between DLP and IRM in Microsoft 365?

DLP identifies sensitive information and prevents unauthorized sharing or transmission across Microsoft 365. IRM, on the other hand, encrypts the actual file and controls what a user can do (like copy, print, or edit) even after the file is downloaded to a local device.

Can users copy text from an IRM-protected document once downloaded?

By default, if IRM is configured to restrict copying, users will not be able to highlight and copy text using the clipboard within the supported Office application.

Microsoft Office Security Issues