logo
search
Data Protection Issues

Fix Sensitivity Labels Lost When Printing Office Files to OneNote

Ayan MasoodAyan Masood Sep 28, 2026 868 views

Question details

Users lose applied sensitivity labels when they attempt to print Microsoft Office documents to OneNote or PDF.

Manage Sensitivity Labels Lost When Printing Office Files to OneNote
Product
Microsoft Office
Device & OS
not provided
Scenario
A user is trying to print a restricted or labeled Office document into OneNote for archiving or sharing.
Observed behavior
The resulting OneNote page or PDF file does not inherit the original sensitivity label, potentially bypassing organizational compliance policies and risking data exposure.
Before you start

Verify that you have IT administrative privileges, as resolving this compliance vulnerability requires modifying organizational Group Policy or administrative settings.

Solution 1Recommended

Restrict Print to OneNote via Group Policy

Disable the virtual 'Print to OneNote' feature at the organizational level to prevent users from bypassing sensitivity labels.

Because Microsoft Office print and conversion workflows currently do not support inheriting sensitivity labels, the most effective way to maintain data compliance is to disable the workflow entirely for labeled documents. IT administrators should restrict virtual printers for Office applications.

1
Open Group Policy Editor

Press Win + R on your keyboard, type 'gpedit.msc', and press Enter to launch the Group Policy Management Editor.

2
Navigate to Office Printing Policies

Navigate to User Configuration > Administrative Templates > Microsoft Office > File > Print (ensure you have the latest administrative templates for Office installed).

3
Disable the Feature

Locate the policy responsible for restricting virtual printing features (like Print to OneNote or Print to PDF), set it to 'Enabled', and apply the restriction to all applicable user groups in your organization.

Restrict Print to OneNote via Group Policy
Microsoft Feedback: Since this is a known limitation, administrators are encouraged to submit a feature request through the Microsoft Feedback Portal to prompt further investigation.
Free Microsoft Office alternative

Try WPS Office for Secure Document Management

If limitations in Microsoft Office workflows disrupt your compliance or daily tasks, consider switching to WPS Office. It provides a highly compatible, lightweight, and robust environment for handling your professional documents securely without unnecessary complications.

  1. 1. Download the Installer: Navigate to the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install WPS Office: Run the downloaded installer and follow the quick on-screen instructions to complete the setup.
  3. 3. Manage Documents Securely: Open your existing Office files in WPS Office and apply secure passwords and editing restrictions natively.
Seamless format compatibility with Microsoft Word, Excel, and PowerPoint filesRobust built-in document encryption and permission management featuresLightweight installation that runs fast on Windows, Mac, Linux, and mobile OSFree to use with a familiar, easy-to-navigate user interface
microsoft office alternative - wps office

Frequently Asked Questions

Why do sensitivity labels disappear when I print an Office file to OneNote?

This is a known limitation of the Windows 'Print to' workflow (including Print to PDF and Print to OneNote). The virtual printing process flattens the document into an image or generic page, stripping away specialized metadata, including Microsoft's sensitivity labels.

Is there a way to force OneNote to inherit sensitivity labels?

Currently, there is no built-in feature to force inheritance when using virtual printers. Microsoft is reviewing the situation, but for now, the label will not transfer automatically to the resulting OneNote notebook.

How can I prevent users from accidentally removing labels via Print to PDF or OneNote?

IT administrators should enforce organizational compliance by restricting virtual printing features through Group Policy, directing users to use native file sharing via OneDrive or SharePoint instead.