Forum Discussion

Xin3n's avatar
Xin3n
Copper Contributor
Jun 16, 2025

Help! Sensitivity label applied to whole tenant mistakenly with Watermark

We create a sensitivity label to have a watermark to be applied on the files on where it assigned but accidentally or due to misconfiguration, the watermark applied to whole tenant and the files, need a solution to automatically removed these watermarks from the files wherever it is applied.

Please assist, TIA...

.

compliance management
information protection and governance
microsoft information governance
microsoft information protection
microsoft information protection developers
microsoft purview

1 Reply

  • vicwingsing's avatar
    vicwingsing
    Iron Contributor
    Jun 26, 2025

    The watermark will only apply to files that has been opened by a person.

    So in your 1st step: Disable the policy that applies the watermark

    2nd step: In the Purview activity explorer, go through the period where the watermarking policy was applied then file out and export only the items where (1) Sensitivity label applied and (2) Manual. You will then get a list of documents that are likely to have the watermark. It will export a file that contains the file path.

    3rd step: Do a spot check to confirm that they indeed have a watermark. 

    4th step: Reapply the label policy WITHOUT the watermark turned on. Since they need to be removed by opening the document and re-label to be removed. You'll likely require an RPA process to open files and re-label the data. 
     

Resources