OneDrive will block screenshots of sensitive documents, but only in Microsoft’s own browser.

Starting next month, OneDrive and SharePoint will block screen captures when enterprise users open certain sensitivity-labelled PDFs in Microsoft Edge. The restriction applies to documents carrying a Purview Information Protection label without the Copy (EXTRACT) permission. When those conditions are met, screenshot blocking activates by default. Personal OneDrive accounts and unlabelled files are not affected.

The feature closes a gap between Microsoft’s desktop apps and its browser experience. Purview labels could already prevent editing, printing, copying, and screenshotting in supported desktop applications, but PDFs opened in the browser did not consistently enforce the same controls. Admins can also disable local downloads, preventing users from saving a protected document and reopening it outside Edge. Microsoft’s AI-powered security tools found a record number of vulnerabilities in its own software this year, and the screenshot restriction addresses the other side of the equation: preventing authorised users from leaking what they are authorised to see.

Chrome, Firefox, Safari, and mobile browsers will not support the restriction. Microsoft warns that users opening protected documents outside Edge “may receive inconsistent enforcement” and recommends that businesses use Conditional Access or browser-management policies to direct employees toward Edge. The security benefit is real, particularly for financial records, legal documents, and unreleased product materials. The catch is that it only works if every person who touches the document uses Microsoft’s browser.

That is the strategic play. DuckDuckGo installs jumped 18% after Google’s AI search overhaul as users sought alternatives to the defaults. Microsoft is making the opposite bet: building features that only work in Edge to give IT departments a reason to mandate it. Screenshot blocking for sensitive PDFs is a genuine security improvement. Making it Edge-exclusive is a distribution strategy wrapped in a compliance feature. Support for additional browsers and mobile apps may arrive later. Microsoft has not said when.