Forum Discussion
Data Loss Prevention (DLP) policies not working or inconsistent
Usually you need this corroborative evidence to trigger a match, as the sensitive types are defined with low confidence level for just the SSN match. Of course if you create your own custom sensitive types, you can configure them as you wish.
As for the policy tip, it's shown when the message is saved in OWA. Outlook needs to download the policy file before it's able to display tips, which might take a while.
Hi, thanks for the response. I have tested tweaking the Min and Max to lower values, but the inconsistency just makes it useless. I have not tried custom sensitivity types yet and will give it a whack.
Are you saying that the policy tip in Outlook on the web will not display until the "new" message is saved as a draft?
The policy has been published for some time now and should have reached users' Outlook clients by now. Is there a way to confirm that or tell?
Scan in OWA is performed every time the message is saved as Draft, and only then the policy tips will be displayed. Outlook uses its own method, generally speaking you should check the policy* xml files in %USERPROFILE%\Appdata\Local\Microsoft\Outlook. To force Outlook to redownload the xml files, delete the HKCU\Software\Microsoft\Office\16.0\Outlook\PolicyNudges key.
Thanks for the great info. That is super helpful in understanding that process for Outlook on the web. I'm checking out the Outlook client files to.
Giant thanks!