Forum Discussion
Policy Tips not showing up
I have been testing how the DLP policys work. I have setup a policy to monitor for SSN's and show a policy tip to the user. What I am expecting to happen is - as a user is writing an email and types in a SSN a policy tip shows up saying that the email contains sensitive information. When I test it though I do not see the policy tip. I have validated that the option to display polisy tips is set under Outlook's MailTip option. Is there any other setup needed to make this work?
Thanks,
Well I'm out of ideas. Time to open a support case I guess.
14 Replies
Chandrika Padaki Bumping this thread as it is directly impacting my organisation's ability to roll out DLP specifically in Outlook and I don't know where else to turn!
My organisation had been testing DLP policies and all was working well until November 2020 where policy tips stopped appearing within the Outlook desktop app. This was noticed by some of us who were on Office version 2006 and above, most recently 2010 & 2011 are still affected by this issue.
As others ITT have said, policy tips still appear in Outlook on web.https://docs.microsoft.com/en-us/outlook/troubleshoot/security/can't-display-dlp-policytip from Microsoft highlights the issue is due to basically the office version being newer than the DLP policy evaluation engine, but all the "resolution" steps don't fix the issue.
I've raised this with Microsoft support, who tell me that I actually knew more about the issue than they did at the time, and they then closed the ticket as they had raised it with the product team.I've detailed everything regarding my experiences with this issue https://sharepointstuff.com/2021/01/20/data-loss-prevention-policy-tips-not-showing-in-outlook/, but can anyone else share their experiences with this. Is the workaround just to not use policy tips, don't use Outlook desktop? For me the tips are a big part of the adoption driver for rolling out DLP as it notifies users of sensitive information and next steps, im also not sure how other organisations can roll out DLP without policy tips in Outlook, when email is still one of the main tools people use for communication...
Which Office/Outlook version are you using? Tips are only available with some SKUs. Also, where did you create the policy from? If using the SCC, make sure the status has chagned accordingly, i.e. it has been deployed. On the client side, you can check if Outlook has downloaded the policy definition file, should be stored in %USERPROFILE%\Appdata\Local\Microsoft\Outlook.
You can also check in OWA (make sure to wait a minute or so for the DLP check to kick in).
VasilMichev how do you force this? I can't seem to do it or find the doc
- We are licensed for E3 and E5 for Non Profit and I am using the 2013 outlook client.
If by SCC you mean Security and Compliance - that is where I setup the DLP policy and it is set to be test with notification.
I see that OWA is also not showing the policy tips.
Thanks,The Office/Outlook clients come in different SKUs too, you need a qualifying one in order to be able to use features such as Policy tips. If you mean the click-to-run version you get as part of E3/E5, then you should be fine.
Did you check about the policy XML files? As for OWA, make sure you give it some time, if I remember correctly the processing happens when the message is saved to drafts or similar.
If both still dont work, I'd suggest taking a look at the actual rules.
