SOLVED
Home

DLP policy can apply for E1 license ?

%3CLINGO-SUB%20id%3D%22lingo-sub-339325%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339325%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20sounds%20like%20a%20license%20violation%20to%20me%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-339320%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339320%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%2C%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20have%20tested%20it%2C%20and%20it%20works%20with%20a%20user%20with%20E1%20and%20experiencing%20exactly%20what%20you%20get%20with%20E3%20then%20I%20guess%20it%20works%20and%20it%20resolves%20your%20issue!%20However%2C%20just%20a%20caveat%20that%20if%2C%20for%20some%20reason%2C%20you%20have%20an%20issue%20then%20Microsoft%20may%20not%20support%20it%20if%20it%20deviates%20from%20the%20service%20terms.%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-339317%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339317%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20I%20just%20create%20DLP%20policy%20(not%20rule)%26nbsp%3B%3CSPAN%3Eand%20test%26nbsp%3B%20with%20E1%20license%20seem%20it%20work%20with%20policy%20.so%20then%20it%20can%20apply%20E1%20and%20E3%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338532%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338532%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20although%20i%20has%20create%20rule%20mail%20with%20sensitive%20infomation%20then%20if%20user%20assign%20E1%20then%20this%20rule%20will%20not%20scan%20%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F74842i5AEAB885C46F4AEC%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338452%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338452%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20DLP%20policy%20will%20be%20applied%20org-wide%20in%20the%20security%20and%20compliance%20centre%2C%20however%2C%20as%20the%20service%20description%20states%20it%20shouldn't%20apply%20explicitly%20to%20the%20users%20with%20the%20E1%20licences%20when%20doing%20DLP%20checks.%20It%20would%20be%20very%20interesting%20to%20discover%20if%20it%20did%2C%20because%20that%20would%20actually%20contradict%20the%20service%20agreement.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20693px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F74826iB84F94130FE9DFBE%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22DLP365.PNG%22%20title%3D%22DLP365.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%2C%20Chris%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338447%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338447%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%26nbsp%3B%3CSPAN%3E1.)%20DLP%20cannot%20be%20applied%20to%20E1%20licences.%20DLP%20needs%20a%20plan%20with%20Exchange%20Online%20Plan%202.%20See%20Office%20365%20service%20description%20here%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20-%26gt%3B%20If%20So%20instead-of%20create%20DLP%20policy%20then%20I%20can%20create%20Rule%20email%20to%20it%20apply%20for%20all%20user%20%3F%20and%20also%20will%20apply%20E1%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338443%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338443%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%2C%3CBR%20%2F%3E%3CBR%20%2F%3E1.)%20DLP%20cannot%20be%20applied%20to%20E1%20licences.%20DLP%20needs%20a%20plan%20with%20Exchange%20Online%20Plan%202.%20See%20Office%20365%20service%20description%20here%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fservicedescriptions%2Foffice-365-platform-service-description%2Foffice-365-platform-service-description%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fservicedescriptions%2Foffice-365-platform-service-description%2Foffice-365-platform-service-description%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E2.)%20Yes%2C%20however%20there%20is%20the%20caveat%20that%20DLP%20does%20cover%20mail%20sent%20between%20on%20premise%20users.%20See%20article%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fsecurity-and-compliance%2Fdata-loss-prevention%2Fdata-loss-prevention%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fsecurity-and-compliance%2Fdata-loss-prevention%2Fdata-loss-prevention%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E3.)%20Yes%2C%20confirmed%20in%20this%20Technet%20article%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F60f94c58-3795-41bd-a813-0b5237584a50%2Fis-it-possible-to-apply-eop-with-dlp-scanning-to-outbound-smtp-sending%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F60f94c58-3795-41bd-a813-0b5237584a50%2Fis-it-possible-to-apply-eop-with-dlp-scanning-to-outbound-smtp-sending%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20questions%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338440%22%20slang%3D%22en-US%22%3EDLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338440%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20i%20have%20some%20question%20about%20DLP%20policy%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%201.%20Policy%20DLP%20can%20apply%20with%20user%20E1%20license%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%202.%20Policy%20DLP%20can%20apply%20for%20user%20from%20local%20send%20email%20to%20cloud%20(hybrid%20exchange)%20and%20from%20cloud%20to%20local%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%203.%20Policy%20DLP%20can%20apply%20for%20user%20from%20local%20relay%20to%20office365%20EOP%20and%20send%20outsite%20to%20gmail%20%3F%3C%2FP%3E%3CP%3EBest%20Regards%2C%3C%2FP%3E%3CP%3EThanks%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-338440%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Tien Ngo Thanh
Regular Contributor

Hello

    i have some question about DLP policy 

    1. Policy DLP can apply with user E1 license ?

    2. Policy DLP can apply for user from local send email to cloud (hybrid exchange) and from cloud to local

    3. Policy DLP can apply for user from local relay to office365 EOP and send outsite to gmail ?

Best Regards,

Thanks 

7 Replies
Solution

Hi @Tien Ngo Thanh,

1.) DLP cannot be applied to E1 licences. DLP needs a plan with Exchange Online Plan 2. See Office 365 service description here

https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-descripti...

2.) Yes, however there is the caveat that DLP does cover mail sent between on premise users. See article

https://docs.microsoft.com/en-us/exchange/security-and-compliance/data-loss-prevention/data-loss-pre...

3.) Yes, confirmed in this Technet article

https://social.technet.microsoft.com/Forums/en-US/60f94c58-3795-41bd-a813-0b5237584a50/is-it-possibl...

Hope that answers your questions

Best, Chris

    1.) DLP cannot be applied to E1 licences. DLP needs a plan with Exchange Online Plan 2. See Office 365 service description here

    -> If So instead-of create DLP policy then I can create Rule email to it apply for all user ? and also will apply E1

 

Hi @Tien Ngo Thanh,

 

The DLP policy will be applied org-wide in the security and compliance centre, however, as the service description states it shouldn't apply explicitly to the users with the E1 licences when doing DLP checks. It would be very interesting to discover if it did, because that would actually contradict the service agreement.

 

DLP365.PNG

 

Best, Chris

So although i has create rule mail with sensitive infomation then if user assign E1 then this rule will not scan ?

Capture.PNG

Highlighted

    I just create DLP policy (not rule) and test  with E1 license seem it work with policy .so then it can apply E1 and E3

 

Hi @Tien Ngo Thanh,

If you have tested it, and it works with a user with E1 and experiencing exactly what you get with E3 then I guess it works and it resolves your issue! However, just a caveat that if, for some reason, you have an issue then Microsoft may not support it if it deviates from the service terms.

Best, Chris

Yes, sounds like a license violation to me :)

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies