Forum Discussion

AlexandrosAP's avatar
AlexandrosAP
Brass Contributor
May 30, 2023

DLP Rule for Exchange using ExceptIfRecipientDomainIs not working any more

Hello,

 

we had setup a DLP Rule for Exchange workloads that only allows sending to specific external recipients in a list we provide via populating the ExceptIfRecipientDomainIs attribute.

 

This has been working fine until a few days back, when suddenly the rule was failing to apply on end users (domain is listed in the Rule's ExceptIfRecipientDomainIs) and email gets blocked.

 

I then realized that the attribute is not populated anymore via Powershell and comes back empty!

 

(Get-DlpComplianceRule -Identity "DLPRULE").ExceptIfRecipientDomainIs

 At the same time, the Rule on the compliance.microsoft.com portal shows up properly with the domains in question.

 

 

I then noticed that those domains now only appear under the AdvancedRule attribute only.

 

(Get-DlpComplianceRule -Identity "DLPRULE") | select -expand advancedrule

 

So it seems there has been some change in DLP rules by the compliance team at Microsoft?

 

 

Resources