Optional policy · Restricted sources for pasting · Scope: Users OU

Copy/paste policy (outbound)

This is the guide's optional step — a Chrome policy, not a DLP rule. With content sources set to * and all three checkboxes enabled, copying from a managed profile into other Chrome profiles, incognito, or non-Chrome applications is blocked. It is the mirror image of rule 6.

Copy sourceCopy this
Outbound test stringCEP-COPY-TEST :: If this text arrives in another profile, incognito, or Notepad, the policy FAILED.
ExecuteBlock expected
  1. Copy the string above in the managed profile.
  2. Paste into Notepad / TextEdit → clipboard should be empty or paste refused.
  3. Paste into an incognito window → blocked.
  4. Paste into a different Chrome profile → blocked.
  5. Control: paste into another tab of the same managed profile → allowed.
Pass criteria
  1. All three outbound destinations fail to receive the clipboard content.
  2. Copy/paste inside the managed profile keeps working.