When protecting enterprise data, there are some risks and limitations when using features in Microsoft OneNote delivered via the OneNote service and displayed in a Web view. These risks and limitations apply to enterprise protected environments like Windows Information Protection (WIP) or Microsoft Intune for mobile device management.
Limitations
In an enterprise protected environment, certain features in OneNote will not be protected due to a limitation in Web technologies. The following examples allow users to transfer enterprise data to a personal location without enterprise protection.
-
When a Web view displays enterprise data in selectable text, a user can choose to copy that data and then paste it into a personal OneNote notebook or into other personal apps.
-
When a Web view displays personal data but OneNote shows enterprise data, a user can copy data from OneNote and then paste it into a Web view without enterprise protection.
Aside from Copy and Paste, there are other mechanisms in certain operating systems that can transfer data. For example, in Windows and in iOS, a user can drag and drop to transfer the data.
Examples in OneNote
The aforementioned limitations affect the following features in OneNote:
-
Meeting Details
-
Researcher
-
Immersive Reader
-
Sticky Notes
-
Class Notebook Add-in
-
Microsoft Translator
Below is an example of a user copying the title and time information of a meeting invitation by using the Meeting Details feature in OneNote for Windows 10, and then pasting that information into a personal notebook.
-
In OneNote for Windows 10, click Insert > Meeting Details.
-
Sign-in with your organizational account, and then wait until your meetings are loaded into the Web view.
-
Select some text in the Web view, and then copy the text (Ctrl+C).
-
Open any personal notebook that is stored on OneDrive, and then paste the text into the notebook.
The next example shows how a user can copy information from a work notebook and then paste it into a personal Sticky Note.
-
In OneNote on iPad, open a notebook from your work account.
-
Copy work content from the notebook.
-
Tap Home > Sticky Notes.
-
Paste the content into a new Sticky Note.
Note: The preceding steps apply only to the iPad version of Microsoft OneNote. The issue does not occur in OneNote on iPhone.
Workarounds
To work around these issues, an IT administrator can restrict access to OneNote features by using the following URLs.
|
Features |
URLs that need to be restricted |
|---|---|
|
Meeting Details |
https://www.onenote.com/officeaddins/* |
|
Researcher |
https://entity.osi.office.net/officeentity/web/views/juno.agave.cshtml |
|
Immersive Reader |
https://www.onenote.com/officeaddins/* |
|
Sticky Notes |
https://www.onenote.com/officeaddins/* |
|
Class Notebook Add-ins |
https://www.onenote.com/officeaddins/* |
|
Microsoft Translator |
https://ogma.osi.office.net/TradukoApi/* |
Important: If you’re copying and pasting the above URLs, be sure to include the trailing asterisks ( * ) where indicated.
Alternative approach by using Microsoft Intune
an IT administrator can also disable OneNote's Add-in features by using Microsoft Intune service to deploy app or device settings to Intune-managed OneNote on supported platforms.
OneNote on iOS
Please refer to instructions in Intune Documentation and specify the following app configuration.
|
Key |
Value |
Device Enrollment Type |
|---|---|---|
|
com.microsoft.onenote.DisableOfficeAddins |
Accepted values: True, False |
Managed apps |
OneNote on Windows 10
Please refer to instructions in Intune Documentation and specify the following device configuration.
|
OMA-URI |
Value |
Device Enrollment Type |
|---|---|---|
|
./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/AppStore/Microsoft.Office.OneNote_8wekyb3d8bbwe/AppSettingPolicy/DisableOfficeAddins |
Date type: string Value: True Default if not specified: False |
Managed devices |
OneNote on Mac
OneNote on Mac is currently does not support Intune
OneNote on other platforms
OneNote on other platforms are not applicable since they do not have feature delivered by service at this point.
More help
Additional technical assistance is available in the OneNote forums on Microsoft Community, where you can get in touch with the OneNote product team to report issues and get information about your questions.
See Also
Fixes or workarounds for recent issues in OneNote for Windows
Fixes or workarounds for recent issues in OneNote for Mac, iPhone, and iPad
