Hello,
Thanks for reaching out to Hexnode Connect.
To answer your question directly: Hexnode cannot natively block copy-paste actions specifically between individual tabs within a standard Windows browser session. On Windows 10 and 11, MDM clipboard controls operate at the device, app, or protected container boundary. Individual browser tabs share the same browser process, so they are not exposed as separate, controllable boundaries through standard Windows MDM restrictions.
However, to address your core security concern of preventing data exfiltration, I highly recommend a two-pronged approach:
1. Web Content Filtering (Recommended Mitigation)
If your goal is to stop users from pasting data into personal emails or unapproved cloud storage, the most effective method is to block access to those destination websites entirely. By using Hexnode’s Web Content Filtering for supported browsers (Edge, Chrome, Firefox), you prevent users from even opening those unapproved sites, eliminating the risk of data being pasted there in the first place.
2. Microsoft Defender Application Guard
For scenarios where you need strict clipboard isolation, you can utilize Application Guard. This forces the browser session into an isolated container. Hexnode can then control the clipboard behavior between the host device and that isolated session (e.g., disabling the clipboard completely, restricting the flow to “isolated-to-host only,” or limiting the allowed content types like text or images).
While a direct tab-to-tab block isn’t possible, combining Web Content Filtering with Application Guard will provide the data loss prevention you are looking for.
I hope this helps you secure your deployment! Feel free to reach out if you have any more doubts or need further assistance.
Best regards,
George,
Hexnode UEM