Data control not allowing save to USB device from application

Question

Is this restriction a known issue or by design? I've set up a rule to ask users to authorise save to removeable storage and e-mail attachment of a document when it contains "surname firstname and fft" i.e. personally identifiable information of pupils. It works great, except that any document now saved directly to removable storage from an application is blocked. It appears from the knowledgebase that this is known about. Is there a workaround? To get users to save to the PC/network first and then copy to a USB device is going to get me shot!

This thread was automatically locked due to age.

Johnstringer · Accepted Answer

Hi, Christian is correct - this behavior is by design. We're intercepting files via Windows Explorer to ensure that data is inspected before it touches the removable storage drive (obviously quite important from a compliance perspective). To ensure that files copies go through Windows Explorer, and can therefore be intercepted, we block direct saves from applications when a "request user authorization" or "block" action is selected for the data control rule. If a monitor only action is selected such transfers are not blocked. A notification message is shown to inform the user to save the file locally and transfer using Windows Explorer. Hope this helps - great to see Data Control being used to detect PII within your organization. Best Regards, John :751