Data Protection Issues

Fix Microsoft Information Protection Not Encrypting All Files in SharePoint

Nimra Malik Oct 23, 2026 868 views

Question details

Users need to resolve an issue where Microsoft Information Protection auto-labeling rules fail to apply encryption to all intended files in SharePoint.

How to Fix Microsoft Information Protection Not Encrypting All Files in SharePoint

Product: Microsoft Information Protection
Device & OS: not provided
Scenario: Uploading multiple documents to SharePoint and relying on MIP auto-labeling policies to encrypt them based on configured file types.
Observed behavior: Despite configured rules, certain files uploaded to SharePoint remain completely unencrypted and lack the expected sensitivity labels.

Before you start

Ensure you have the necessary administrator privileges in the Microsoft Purview compliance portal to view and modify sensitivity label policies.

Solution 1Recommended

Verify Sensitivity Labels and Auto-Labeling Configuration

Check whether labels are actually applying to the uploaded files and verify that your auto-labeling policies cover the affected file types.

Microsoft Information Protection (MIP) relies on background services in SharePoint to evaluate files and apply labels. If conditions are too narrow or file types are unsupported, encryption will fail.

Check current file status

Open the unencrypted documents directly from SharePoint in the Office desktop application to verify if any sensitivity label is visible in the sensitivity bar.

Review label conditions

Access the Microsoft Purview compliance portal, navigate to 'Information protection' > 'Labels', and review the specific auto-labeling conditions to ensure they match the unencrypted files.

Verify supported file types

Check your policy settings to ensure the target file types (e.g., .docx, .xlsx, .pdf) are natively supported for auto-labeling and encryption in SharePoint.

Check policy processing status

Review the auto-labeling policy processing status in the Purview portal. It may indicate a backlog or scanning failure preventing the background labeling engine from completing.

Verify Sensitivity Labels and Auto-Labeling Configuration

Processing Delays: SharePoint auto-labeling evaluates files asynchronously in the background. Depending on server load and document volume, it can take hours or even days for labels and encryption to be applied to newly uploaded files.

Free Microsoft Office alternative

Looking for simpler document security?

Enterprise-level encryption policies can be difficult to manage and troubleshoot. If you need a straightforward way to secure your personal or business files without complex server rules, WPS Office offers a powerful, lightweight, and free alternative to Microsoft Office.

1. Install WPS Office: Download and install the free version of WPS Office on your PC or Mac.
2. Open your document: Open the file you wish to secure using WPS Writer, Spreadsheets, or Presentation.
3. Encrypt the file locally: Navigate to Menu > Document Encryption and set a secure password to protect your data instantly.

Easily apply local password encryption to your documents in seconds.Fully compatible with all major Microsoft Office file formats (.docx, .xlsx, .pptx).Lightweight, fast, and features a highly familiar user interface.Free alternative to expensive Microsoft 365 subscriptions.

Frequently Asked Questions

Which file types are supported by Microsoft Information Protection in SharePoint?

MIP natively supports modern Microsoft Office formats like .docx, .xlsx, and .pptx, as well as PDFs. Legacy formats (.doc, .xls) and certain non-Microsoft files often cannot be encrypted without specialized client-side configurations.

Why does SharePoint take so long to encrypt uploaded files?

SharePoint applies auto-labeling policies in the background to avoid performance impacts. Because the system processes these tasks asynchronously, it may take several days for large batches of files to be fully scanned and encrypted.

Can I manually force encryption if the auto-labeling policy fails?

Yes. If auto-labeling fails, users with appropriate permissions can manually apply a sensitivity label directly from within the Microsoft Office application (via the Sensitivity button on the Home tab) before or after uploading the file to SharePoint.

Microsoft Office Security Issues