Has anyone successfully implemented Microsoft's DLP policy based on file extension and blocking the copy of the files to USB removable storage? We are losing confidence with the tool with the lack of inconsistency we are seeing.
1. When we add members to the policy either directly or through a mail-enabled security group, there are huge delays, some taking over 4 days. In some cases, they never get the policy applied to them while other DLP policies that target Exchange works perfectly.
2. Admin alerts are soo inconsistent. Sometimes we get the alert, sometimes they are delayed, sometimes we don't get them at all.
3. We have a policy that blocks .pst files from being transferred but we get an alert that a block occurred for a .pdf or .dotm file. WHY??
No one from Microsoft has been able to explain these things. HELP!