Forum Discussion
MDCA File Policy in Trash option
MicrosoftHi jokej_outlook,
If a file has been deleted and trashed my expectation is that it would fall out of file matches and be removed from the UI in Defender for Cloud Apps.
Keith_Fleminghave you had experience if there's retention hold in place for files stored onedrive and sharepoint online?
I am unsure if its related, it seems that file violations stayed in the detected list even after they've been deleted by users.
One work-around I had was to manually 'refresh' the files in MDCA, that seems to help, but I have 1.2mil violations and I can't 'refresh' all of them regularly from the console.
- Keith_Fleming
jokej_outlook after the refresh is the file being deleted from the UI?
If you create a new file policy I would expect files in scope to be rescanned automatically without needing to refresh.
- Thats right because MDCA employs 2 separate scanning engines to process near-real-time speed and another for files already present in the system. By creating a new policy, the whole list will be refreshed.
Unfortunately, I can't go that route because I have a downstream process which requires the same policy ID.- Keith_Fleming
jokej_outlook I would recommend opening up a case for this so it can be investigated. If the file is in the trash and it's deleted, I wouldn't expect it see it in the UI and matching a policy.