Microsoft Purview | Share block at external users

Question

Hello community.I have an issue with Microsoft Purview DLP policies.I am trying to create a policy that prevents documents from being shared through OneDrive with external users, while allowing certain exceptions. However, when I select the option "Block Access to external domains and users" and assign a specific email address to be blocked, it does not work. The configured email address is not being blocked.I was reviewing this with Copilot, and it mentioned that if the external user you are sharing with already exists in Entra ID, the tenant may treat the user differently (not necessarily as an external user). My external user exists in Entra ID as a Guest account.The external user is registered as follows:Displayname: User NameUserprincipalname: user.name_external.domain#EXT#@company.onmicrosoft.comUser Type: Guest&nbsp;Has anyone else experienced this issue? I am sharing evidence of the policy configuration.&nbsp;&nbsp;&nbsp;&nbsp;

vasilmichev · Answer

In my experience, it takes few days for such policy to start working as expected, regardless of what the policy sync status says. Leave it over the weekend and see how it behaves.

snrc · Answer

Thanks VasilMichev​&nbsp; I'll wait some days.&nbsp;

snrc · Answer

Hello VasilMichev​&nbsp;The problem continues.

fvaldez_9 · Answer

Did it work? If not, read&nbsp;https://learn.microsoft.com/en-us/sharepoint/sensitive-by-default

Forum Discussion

Microsoft Purview | Share block at external users

4 Replies