Defender Browser/Domain blocks

Question

Hello,We have an issue with Defender for Endpoint, with most users, When we add browsers/domains in DLP settings "Browser and domain restrictions to sensitive data" usually an unallowed browser would not open in a blocked browser by default and would redirect to edge.&nbsp;For some users, This does not work, We have checked the affected devices and they have configuration status, policy sync status of successful, user status is Valid user.On the device itself the tasks/services are running and have been restarted already.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Setting e.g.&nbsp;&nbsp;&nbsp;&nbsp;

andrerocha1450 · Answer

Hi there,Please check in your admin center for the message -&gt; MC793918 (17/05/2024)Microsoft separated the MDE agent from Purview DLP.MpDlpService.exe” for Microsoft Purview DLP and “MsMpEng.exe” exclusively for Microsoft Defender for Endpoint.That might be the cause of your issue.Also, ensure that you deployed the purview browser extension for that browsers.

ahmedshmk · Answer

andrerocha1450&nbsp;Thanks for your reply, I am aware about the update but as mentioned I can see both services.&nbsp;Browser extension is certainly installed&nbsp;&nbsp;

andrerocha1450 · Answer

AhmedSHMKdid you also enabled a dlp policy with this?&nbsp;&nbsp;

ahmedshmk · Answer

andrerocha1450&nbsp;I create a policy with a rule detecting a label applied to content, And taking the below actions:Apply restrictions(All Applied):&nbsp;Restrict app activities:(All Applied)&nbsp;===================There is a second rule in the policy that takes the below action:&nbsp;&nbsp;&nbsp;==================None of the rules have stop processing more policies/rules enabled.&nbsp;==================I noticed however that policy sync/configuration status for the device is not configured. Windows version matches the pre-requisite though not sure why.

andrerocha1450 · Answer

try and do the following:login to compliance.microsoft.comSelect "Settings" from the menu on the leftSelect "Device onboarding"Find and select any out of sync deviceif that doesn't work, try forcing a sync from security.microsoft.com portalSelect "Devices" -&gt; Find the Device in your device inventory -&gt; Click on the 3 dots and select policy sync

Forum Discussion

Defender Browser/Domain blocks

7 Replies

Resources