Forum Discussion
policy for File shared with unauthorized domain in MCAS
How can i create a policy for File shared with unauthorized domain in MCAS. I used the template present in MCAS, however its not working. Because i shared multiple files with an external domain, ...
Had this same problem the other day so also interested in a solution.
My filter is the same as yours:
Files matching all of the following
- Collaborators - Any from domain - contains - domain.com
- Apply to all files, all file owners
- Create an alert for each matching file
Governance actions
- Remove external users
When I preview the results, there's nothing, but when I go to Investigate > Files, I can see user@domain.com as a named sharing user. IE, they were chosen as 'specific people' in the sharing dialogue, not a universal link. If I change the query to be user@domain.com, it returns successfully. So something's going wrong with picking up the domain only.