Export to PDF keeps the label
An administrator turns on sensitivity label support for PDF files in SharePoint and OneDrive. An employee tries Print to PDF and gets a warning, then exports a Strictly Confidential document to PDF from Word, which keeps the label and the encryption. The PDF opens in Edge and Adobe Acrobat but not in other browsers, and DLP blocks it when it is emailed to a partner.
W
PDF
SENSITIVITY LABELS · ENCRYPTION
Export to PDF keeps the label
Ada Admin
Eli Employee
CONTENT, NOT FORMAT
The protection follows the content into the PDF
Board minutes.docx
File › Export › PDF
Board minutes.pdf
Windows PowerShell
PS C:\>
PS C:\>
PS C:\> _
WHAT THIS TURNS ON
SharePoint and OneDrive understand labeled PDFs
Read the label on PDF files, also for DLP and Data explorer
Index and search the content of protected PDFs
Let users apply or change labels on PDFs in the browser
Exporting to PDF from Office works without it. Off by default.
Board minutes.docx · Word
Strictly Confidential
File
Home
Insert
Layout
Review
STRICTLY CONFIDENTIAL
Board minutes
←
Home
New
Open
Info
Save
Save As
Print
Share
Export
Close
Print
Print
Printer
Microsoft Print to PDF
Ready
Settings
Print all pages
Print one sided
A4
STRICTLY CONFIDENTIAL
Export
Create PDF/XPS Document
Change File Type
Create a PDF/XPS Document
▪ Preserves layout, formatting, fonts and images
▪ Content can't be easily changed
▪ Free viewers are available on the web
Create
PDF/XPS
Microsoft Information Protection
i
Your organization requires sensitivity labels for all
files you create or edit, such as PDFs. Files you
create from the Print command may lose their
sensitivity labels and other content metadata,
such as accessibility tags.
Continue to File > Export to create files that
preserve your organization's policies.
Learn more
Continue
Cancel
Publish as PDF or XPS
Documents
File name:
Board minutes
Save as type:
PDF
Open file after publishing
Options...
Publish
Cancel
Board minutes.pdf
Strictly Confidential, encrypted
Same label, same permissions
New message · Outlook
Send
To
ada@contoso.com
External
Subject
Board meeting
Sensitivity ▾
General
Board minutes.pdf
Strictly Confidential
Sent
This email can't be sent
Strictly Confidential content can't be sent outside
the organization.
OK
Inbox · Microsoft 365
Your email was not delivered
Rule: Strictly Confidential to external
Original message attached
DLP checked the linked file after Send.
THE USER EXPERIENCE
A Strictly Confidential PDF
Eli turns the board minutes into a PDF and shares it.
Good to know
NEXT
Where Copilot is protected
1/7
SENSITIVITY LABELS · ENCRYPTION
Export to PDF keeps the label
Protection follows the content, not the file format.
We turn on PDF support in SharePoint and OneDrive,
export a Strictly Confidential document from Word,
and see who can open the PDF and what DLP does with it.
informasjonsbeskyttelse.no
Previous
Next
Play
Restart
Fullscreen
Sound: off