Forum Discussion

Copper Contributor

Nov 23, 2022

Intune policy settings are required to restrict downloading, copying, and deleting... -Reg.

Hi everyone, 1) Is it possible in Microsoft Intune to set this up policy that every time a user wants to download, copy, or delete something, the admin has to get the notification? 2)Is it poss...

Conditional Access

Intune

Moe_Kinani

Bronze Contributor

Nov 23, 2022

Hi Akhil,

1. You may need to use EndPoint for DLP, you may get overwhelmed with the notifications though!

https://learn.microsoft.com/en-us/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide#:~:text=Endpoint%20data%20loss%20prevention%20(Endpoint,three%20latest%20released%20versions)%20devices

https://www.sharepointdiary.com/2020/06/disable-mass-delete-email-notification-in-sharepoint-online.html

2. I would remove Admin privileges from the user and replace with standard user, this way user needs to check with IT before installing apps.
If still looking for notifications, you can use Log Analytics Agent and setup alerts to notify you on certain Event Viewer ID.

https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events

Hope this helps!
Moe

.