SOLVED

Check Email Attachement Sensitivity label mail-flow rule

%3CLINGO-SUB%20id%3D%22lingo-sub-1521442%22%20slang%3D%22en-US%22%3ECheck%20Email%20Attachement%20Sensitivity%20label%20mail-flow%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1521442%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20that%20a%20mailflow%20rule%20can%20be%20used%20to%20check%20an%20attachments%20sensitivity%20label%2C%20if%20the%20attachments%20sensitivity%20label%20is%20higher%20than%20what%20the%20emails%20is%20set%20to%20then%20the%20emails%20sensitivity%20is%20automatically%20raised%20to%20match%20the%20attachment%20(but%20not%20lowered%20if%20the%20attachments%20is%20lower%20than%20the%20emails)%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20hope%20this%20makes%20sense.%26nbsp%3B%20Personally%20I%20would%20have%20thought%20this%20would%20be%20the%20case%20bydesign.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20I%20have%20tried%20so%20far%20is%20below%20(label%20guid%20stared%20out).%26nbsp%3B%20There%20must%20be%20a%20better%20way%20to%20do%20this%20though.%26nbsp%3B%20Any%20ideas%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22wrapperdiv%20SDOWrap%22%3E%3CDIV%20class%3D%22RuleDetailsPanel%22%3E%3CDIV%3E%3CSPAN%20class%3D%22RuleDetailsPanel_SectionHeader%22%3EIf%20the%20message...%3C%2FSPAN%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3EIs%20sent%20to%20'Outside%20the%20organization'%3CBR%20%2F%3Eand%20attachment%20metadata%20properties%20contain%20these%20words%3A%20'MSIP_Label_******-****-****-****-*******_Enabled%3ATrue'%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%20class%3D%22RuleDetailsPanel_SectionHeader%22%3EDo%20the%20following...%3C%2FSPAN%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3Eset%20message%20header%20'MSIP_Header'%20with%20the%20value%20'MSIP_Label_******-****-****-****-*******'%3C%2FDIV%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3EThis%20is%20then%20read%20by%20the%20email%20gateway%20service%20and%20is%20dealt%20with%20in%20a%20way%20that%20we%20want%20the%20sensitivity%20to%20be%20dealt%20with.%3C%2FDIV%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3EAny%20suggestions%20on%20this%20would%20be%20greatly%20appreciated.%3C%2FDIV%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22RuleDetailsPanel_Description%22%3EThanks.%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1521442%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1521735%22%20slang%3D%22en-US%22%3ERe%3A%20Check%20Email%20Attachement%20Sensitivity%20label%20mail-flow%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1521735%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F468279%22%20target%3D%22_blank%22%3E%40ByDesign1977%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%20using%20the%20label%20GUID%20in%20conjunction%20with%20mail%20flow%20rules%20is%20really%20the%20only%20supported%20way%20of%20doing%20this%20sort%20of%20thing%20at%20the%20moment.%26nbsp%3B%20Works%20pretty%20well%20in%20my%20experience.%26nbsp%3B%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1521812%22%20slang%3D%22en-US%22%3ERe%3A%20Check%20Email%20Attachement%20Sensitivity%20label%20mail-flow%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1521812%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks.%26nbsp%3B%20Any%20ideas%20why%20this%20isn't%20working%3F%26nbsp%3B%20I%20am%20attaching%20a%20word%20doc%20set%20to%20highly%20confidential%20but%20the%20initial%20email%20is%20confidential%20so%20I%20want%20to%20insert%20into%20the%20header%20so%20the%20email%20gateway%20reads%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20tested%20and%20its%20not%20inserting%20the%20information%20into%20the%20email%20header%20for%20some%20reason%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22ByDesign1977_0-1594754433981.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F205288iC70F1E677512E70F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22ByDesign1977_0-1594754433981.png%22%20alt%3D%22ByDesign1977_0-1594754433981.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks%20in%20advance.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1522669%22%20slang%3D%22en-US%22%3ERe%3A%20Check%20Email%20Attachement%20Sensitivity%20label%20mail-flow%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1522669%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F468279%22%20target%3D%22_blank%22%3E%40ByDesign1977%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOnly%20thing%20I%20can%20spot%20in%20your%20screenshot%20is%20you%20have%20%22Enabled%3ATrue%22%20whereas%20in%20my%20example%20below%20it%20is%20%22Enabled%3DTrue%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202020-07-15%20at%2006.41.25.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F205412iF4D4B07B3616D69F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Screenshot%202020-07-15%20at%2006.41.25.png%22%20alt%3D%22Screenshot%202020-07-15%20at%2006.41.25.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETry%20changing%20that%20value%20and%20see%20if%20it%20makes%20a%20difference.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1522723%22%20slang%3D%22en-US%22%3ERe%3A%20Check%20Email%20Attachement%20Sensitivity%20label%20mail-flow%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1522723%22%20slang%3D%22en-US%22%3ESorry%2C%20my%20bad.%20It%20is%20working.%20Thanks%20for%20your%20help.%20I%20was%20just%20took%20longer%20than%20normal%20for%20the%20rule%20to%20kick%20in.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1522914%22%20slang%3D%22en-US%22%3ERe%3A%20Check%20Email%20Attachement%20Sensitivity%20label%20mail-flow%20rule%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1522914%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F468279%22%20target%3D%22_blank%22%3E%40ByDesign1977%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExcellent%2C%20glad%20it's%20working%20for%20you.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi All

 

Is there a way that a mailflow rule can be used to check an attachments sensitivity label, if the attachments sensitivity label is higher than what the emails is set to then the emails sensitivity is automatically raised to match the attachment (but not lowered if the attachments is lower than the emails)?

 

I hope this makes sense.  Personally I would have thought this would be the case bydesign.

 

What I have tried so far is below (label guid stared out).  There must be a better way to do this though.  Any ideas:

 

If the message...
Is sent to 'Outside the organization'
and attachment metadata properties contain these words: 'MSIP_Label_******-****-****-****-*******_Enabled:True'
Do the following...
set message header 'MSIP_Header' with the value 'MSIP_Label_******-****-****-****-*******'
 
This is then read by the email gateway service and is dealt with in a way that we want the sensitivity to be dealt with.
 
Any suggestions on this would be greatly appreciated.
 
Thanks.
5 Replies
Highlighted
Best Response confirmed by ByDesign1977 (Occasional Contributor)
Solution

@ByDesign1977 

 

Hi, using the label GUID in conjunction with mail flow rules is really the only supported way of doing this sort of thing at the moment.  Works pretty well in my experience.  :smile:

Highlighted

@PeterRising 

 

Many thanks.  Any ideas why this isn't working?  I am attaching a word doc set to highly confidential but the initial email is confidential so I want to insert into the header so the email gateway reads it.

 

I have tested and its not inserting the information into the email header for some reason

 

ByDesign1977_0-1594754433981.png

 

Many thanks in advance.

 

 

 

Highlighted

@ByDesign1977 

 

Only thing I can spot in your screenshot is you have "Enabled:True" whereas in my example below it is "Enabled=True".

 

Screenshot 2020-07-15 at 06.41.25.png

 

Try changing that value and see if it makes a difference.

Highlighted
Sorry, my bad. It is working. Thanks for your help. I was just took longer than normal for the rule to kick in.
Highlighted

@ByDesign1977 

 

Excellent, glad it's working for you.