Microsoft Purview - Paint By Numbers (Part2a) – Add the ability to add Container and Site labels

Published Mar 08 2022 04:49 PM 872 Views
Microsoft

paint_by_numbers_splash_picture.jpg

Disclaimer

This document is not meant to replace any official documentation, including those found at docs.microsoft.com.  Those documents are continually updated and maintained by Microsoft Corporation.  If there is a discrepancy between this document and what you find in the Compliance User Interface (UI) or inside of a reference in docs.microsoft.com, you should always defer to that official documentation and contact your Microsoft Account team as needed.  Links to the docs.microsoft.com data will be referenced both in the document steps as well as in the appendix.

All of the following steps should be done with test data, and where possible, testing should be performed in a test environment.  Testing should never be performed against production data.

 

Target Audience

The Information Protection section of this blog series is aimed at Security and Compliance officers who need to properly label data, encrypt it where needed.

 

Document Scope

This document is meant to guide an administrator who is “net new” to Microsoft E5 Compliance through.

We will be running PowerShell scripts to allow the Secirity and Compliance portal to access labeling in SharePoint Sites and Teams Containers.

It is presumed that you already have a Sensitive Information Type that you want to use in your Information Protection policy.  For the purposes of this document, I will use a copy of the U.S. Social Security Number (SSN) called “U.S. SSN – Numbers Only” that I created in Part 1 of this blog series. 

 

Out-of-Scope

This document does not cover any other aspect of Microsoft E5 Compliance, including:

  • Sensitive Information Types
  • Exact Data Matching
  • Data Protection Loss (DLP) for Exchange, OneDrive, Devices
  • Microsoft Cloud App Security (MCAS)
  • Records Management (retention and disposal)
  • Overview of Advanced eDiscovery (AeD)
  • Reports and Analytics available in of Advanced eDiscovery (AeD)
  • Insider Risk Management
  • Privacy Management

It is presumed that you have a pre-existing of understanding of what Microsoft E5 Compliance does and how to navigate the User Interface (UI).

It is also presumed you are using an existing Information Types (SIT) or a Exact Data Match (EDM) you have created for your testing.

We will not be working with pre-existing Teams sites.

At this stage, we will not be creating, publishing or adding labels to a SharePoint Site or Teams Containr.  That will be done in Part 2b of this blog series “Adding a Sensitivity Label to a Container and/or Site”

 

If you wish to set up and test any of the other aspects of Microsoft E5 Compliance, please refer to Part 1 of this blog series (listed in the link below) for the latest entries to this blog.  That webpage will be updated with any new walk throughs or Compliance relevant information, as time allows.

Microsoft Compliance - Paint By Numbers Series (Part 1) - Sensitive Information Types - Microsoft Te...

 

Overview of Document

  1. We will be running PowerShell scripts to allow the Secirity and Compliance portal to access labeling in SharePoint Sites and Teams Containers.

Use Case

Create a Sensitivity Label and apply it to a Microsoft Team.  This will apply the protection of a Sensitivity Label to protect the files within a Microsoft Team.

 

Definitions

  • Sensitivity Label – a metadata tag
  • Publish Label – making the metadata tag available to your tenant

 

 

Notes

  • Containers (in SharePoint) are a gate keeper for access to files inside SharePoint/Teams sites
  • Container labels do not apply labels to objects inside the container (ex. PPT and Word docs do not receive the label of the Container)
  • When there is a mismatch of the label of a container versus that of a file inside the container, then this can be audited.
  • The application of a sensitivity label at the Team container level prevents inappropriate / external team members from being added to the Team.  This prevents oversharing from occurring in the first place.
  • Privacy labels (Private, org-wide & public). These Sensitivity Labels are linked to the corresponding setting in the Container/Site configuration.
    • Private – data stays inside a certain group of users within the organization
    • Org-wide – data stays inside the organization
    • Public – data available for access outside the organization

 

 

Pre-requisites

  • Create a Sensitive Information Type (SIT) in Part 1 OR an Exact Data Match (EDM) in Part 1a of this blog series.

 

 

Adding the ability to label Containers and Sites

 

  1. On a VM connected to your AAD test tenant, run the following Powershell commands in Powershell_ISE with elevated rights:

 

a. Install-Module AzureADPreview

 

b. Import-Module AzureADPreview

 

c. Connect-AzureAD (this last command will ask for an administrative account

 

James_Havens_0-1646258682951.png

 

 

  1. Next run these following commands:

a. $setting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)

 

James_Havens_1-1646258682958.png

 

b. $template = Get-AzureADDirectorySettingTemplate -Id 62375ab9-6b52-47ed-826b-58e47e0e304b

 

James_Havens_2-1646258682962.png

 

c. $setting = $template.CreateDirectorySetting()

 

James_Havens_3-1646258682963.png

 

d. note - you might need to run these individually as compared to being part of PS script

 

  1. Verify that the settings have been updated.

 

a. In a Command Prompt, check your settings with this command.  It should look like the following with 3 Falses at the top and then 3 Trues at the bottom.

 

b. $Setting.Values

 

 

James_Havens_4-1646258682970.png

 

 

 

  1. Enable the MIP Labels (this is the top value above.

 

a. $Setting["EnableMIPLabels"] = "True

 

James_Havens_5-1646258682972.png

 

 

  1. Verify your settings have changed with this command by rerunning the command from above

 

a. $Setting.Values

 

 

James_Havens_6-1646258682993.png

 

 

  1. Save the changes to AAD with the following command line:

 

a. New-AzureADDirectorySetting -DirectorySetting $setting

 

 

James_Havens_7-1646258682994.png

 

 

  1. Install Exchange module (if needed)

 

a. Install-Module ExchangeOnlineManagement

 

James_Havens_8-1646258682996.png

 

 

  1. Next import the ExchangeOnlineManagement.  Run this PowerShell command

 

a. Import-Module ExchangeOnlineManagement

 

James_Havens_9-1646258682997.png

 

b. Note – you will need to allow for scripts to be run.

 

  1. This Powershell script will tell you if you can execute the Import-Module policy above

 

a. Get-ExecutionPolicy -List

 

James_Havens_10-1646258683003.png

 

 

  1. This PowerShell script will allow you to run the Import-Module

 

a. Set-ExecutionPolicy Unrestricted

 

James_Havens_11-1646258683004.png

 

 

  1. Run this Powershell script again to verify that the Local Machine has changed to Unrestricted”

 

a. Get-ExecutionPolicy -List

 

James_Havens_12-1646258683018.png

 

b. Note – documentation on the Get0ExecutionPolicy PowerShell script is in the Appendix and Links section below.

 

  1. Run this Powershell script to connect your IP session.  You will need your administrator account name.

 

 

a. Connect-IPPSSession -UserPrincipalName username UPN.  <UPN> is your account in user principal name format (ex admin@companyx.com )

 

James_Havens_13-1646258683021.png

 

 

  1. You will see this message indicating the PowerShell script is running.

 

James_Havens_14-1646258683024.png

 

 

  1. The last step is to execute the following PowerShell script to synchronize your labels so they can be applied to SharePoint and Teams Grops and Sites.

 

a. Execute-AzureAdLabelSync

 

James_Havens_15-1646258683025.png

 

 

  1. You can now create and publish our Sensitivity Labels.  Proceed to Part 2b of this blog series “Adding a Sensitivity Label to a Container and/or Site”

 

 

Appendix and Links

 

 

 

 

 

 

 

 

 

 

 

 

 

 

%3CLINGO-SUB%20id%3D%22lingo-sub-3243344%22%20slang%3D%22en-US%22%3EPart%202a%20%E2%80%93%20Adding%20the%20ability%20to%20add%20Container%20and%20Site%20labels%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3243344%22%20slang%3D%22en-US%22%3E%3CH1%20id%3D%22toc-hId--2107059340%22%20id%3D%22toc-hId--2107054561%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22paint_by_numbers_splash_picture.jpg%22%20style%3D%22width%3A%20200px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352528i436C07BED5ED1653%2Fimage-size%2Fsmall%3Fv%3Dv2%26amp%3Bpx%3D200%22%20role%3D%22button%22%20title%3D%22paint_by_numbers_splash_picture.jpg%22%20alt%3D%22paint_by_numbers_splash_picture.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FH1%3E%0A%3CH1%20id%3D%22toc-hId-380453493%22%20id%3D%22toc-hId-380458272%22%3EDisclaimer%3C%2FH1%3E%0A%3CP%3EThis%20document%20is%20not%20meant%20to%20replace%20any%20official%20documentation%2C%20including%20those%20found%20at%20docs.microsoft.com.%26nbsp%3B%20Those%20documents%20are%20continually%20updated%20and%20maintained%20by%20Microsoft%20Corporation.%26nbsp%3B%20If%20there%20is%20a%20discrepancy%20between%20this%20document%20and%20what%20you%20find%20in%20the%20Compliance%20User%20Interface%20(UI)%20or%20inside%20of%20a%20reference%20in%20docs.microsoft.com%2C%20you%20should%20always%20defer%20to%20that%20official%20documentation%20and%20contact%20your%20Microsoft%20Account%20team%20as%20needed.%26nbsp%3B%20Links%20to%20the%20docs.microsoft.com%20data%20will%20be%20referenced%20both%20in%20the%20document%20steps%20as%20well%20as%20in%20the%20appendix.%3C%2FP%3E%0A%3CP%3EAll%20of%20the%20following%20steps%20should%20be%20done%20with%20test%20data%2C%20and%20where%20possible%2C%20testing%20should%20be%20performed%20in%20a%20test%20environment.%26nbsp%3B%20Testing%20should%20never%20be%20performed%20against%20production%20data.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--1427000970%22%20id%3D%22toc-hId--1426996191%22%3ETarget%20Audience%3C%2FH1%3E%0A%3CP%3EThe%20Information%20Protection%20section%20of%20this%20blog%20series%20is%20aimed%20at%20Security%20and%20Compliance%20officers%20who%20need%20to%20properly%20label%20data%2C%20encrypt%20it%20where%20needed.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1060511863%22%20id%3D%22toc-hId-1060516642%22%3EDocument%20Scope%3C%2FH1%3E%0A%3CP%3EThis%20document%20is%20meant%20to%20guide%20an%20administrator%20who%20is%20%E2%80%9Cnet%20new%E2%80%9D%20to%20Microsoft%20E5%20Compliance%20through.%3C%2FP%3E%0A%3CP%3EWe%20will%20be%20running%20PowerShell%20scripts%20to%20allow%20the%20Secirity%20and%20Compliance%20portal%20to%20access%20labeling%20in%20SharePoint%20Sites%20and%20Teams%20Containers.%3C%2FP%3E%0A%3CP%3EIt%20is%20presumed%20that%20you%20already%20have%20a%20Sensitive%20Information%20Type%20that%20you%20want%20to%20use%20in%20your%20Information%20Protection%20policy.%26nbsp%3B%20For%20the%20purposes%20of%20this%20document%2C%20I%20will%20use%20a%20copy%20of%20the%20U.S.%20Social%20Security%20Number%20(SSN)%20called%20%E2%80%9CU.S.%20SSN%20%E2%80%93%20Numbers%20Only%E2%80%9D%20that%20I%20created%20in%20Part%201%20of%20this%20blog%20series.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--746942600%22%20id%3D%22toc-hId--746937821%22%3EOut-of-Scope%3C%2FH1%3E%0A%3CP%3EThis%20document%20does%20not%20cover%20any%20other%20aspect%20of%20Microsoft%20E5%20Compliance%2C%20including%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ESensitive%20Information%20Types%3C%2FLI%3E%0A%3CLI%3EExact%20Data%20Matching%3C%2FLI%3E%0A%3CLI%3EData%20Protection%20Loss%20(DLP)%20for%20Exchange%2C%20OneDrive%2C%20Devices%3C%2FLI%3E%0A%3CLI%3EMicrosoft%20Cloud%20App%20Security%20(MCAS)%3C%2FLI%3E%0A%3CLI%3ERecords%20Management%20(retention%20and%20disposal)%3C%2FLI%3E%0A%3CLI%3EOverview%20of%20Advanced%20eDiscovery%20(AeD)%3C%2FLI%3E%0A%3CLI%3EReports%20and%20Analytics%20available%20in%20of%20Advanced%20eDiscovery%20(AeD)%3C%2FLI%3E%0A%3CLI%3EInsider%20Risk%20Management%3C%2FLI%3E%0A%3CLI%3EPrivacy%20Management%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EIt%20is%20presumed%20that%20you%20have%20a%20pre-existing%20of%20understanding%20of%20what%20Microsoft%20E5%20Compliance%20does%20and%20how%20to%20navigate%20the%20User%20Interface%20(UI).%3C%2FP%3E%0A%3CP%3EIt%20is%20also%20presumed%20you%20are%20using%20an%20existing%20Information%20Types%20(SIT)%20or%20a%20Exact%20Data%20Match%20(EDM)%20you%20have%20created%20for%20your%20testing.%3C%2FP%3E%0A%3CP%3EWe%20will%20not%20be%20working%20with%20pre-existing%20Teams%20sites.%3C%2FP%3E%0A%3CP%3EAt%20this%20stage%2C%20we%20will%20not%20be%20creating%2C%20publishing%20or%20adding%20labels%20to%20a%20SharePoint%20Site%20or%20Teams%20Containr.%26nbsp%3B%20That%20will%20be%20done%20in%20Part%202b%20of%20this%20blog%20series%20%E2%80%9CAdding%20a%20Sensitivity%20Label%20to%20a%20Container%20and%2For%20Site%E2%80%9D%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1740570233%22%20id%3D%22toc-hId-1740575012%22%3EOverview%20of%20Document%3C%2FH1%3E%0A%3COL%3E%0A%3CLI%3EWe%20will%20be%20running%20PowerShell%20scripts%20to%20allow%20the%20Secirity%20and%20Compliance%20portal%20to%20access%20labeling%20in%20SharePoint%20Sites%20and%20Teams%20Containers.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CH1%20id%3D%22toc-hId--66884230%22%20id%3D%22toc-hId--66879451%22%3EUse%20Case%3C%2FH1%3E%0A%3CP%3ECreate%20a%20Sensitivity%20Label%20and%20apply%20it%20to%20a%20Microsoft%20Team.%26nbsp%3B%20This%20will%20apply%20the%20protection%20of%20a%20Sensitivity%20Label%20to%20protect%20the%20files%20within%20a%20Microsoft%20Team.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--1874338693%22%20id%3D%22toc-hId--1874333914%22%3EDefinitions%3C%2FH1%3E%0A%3CUL%3E%0A%3CLI%3E%3CU%3ESensitivity%20Label%3C%2FU%3E%20%E2%80%93%20a%20metadata%20tag%3C%2FLI%3E%0A%3CLI%3E%3CU%3EPublish%20Label%3C%2FU%3E%20%E2%80%93%20making%20the%20metadata%20tag%20available%20to%20your%20tenant%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-613174140%22%20id%3D%22toc-hId-613178919%22%3ENotes%3C%2FH1%3E%0A%3CUL%3E%0A%3CLI%3EContainers%20(in%20SharePoint)%20are%20a%20gate%20keeper%20for%20access%20to%20files%20inside%20SharePoint%2FTeams%20sites%3C%2FLI%3E%0A%3CLI%3EContainer%20labels%20do%20not%20apply%20labels%20to%20objects%20inside%20the%20container%20(ex.%20PPT%20and%20Word%20docs%20do%20not%20receive%20the%20label%20of%20the%20Container)%3C%2FLI%3E%0A%3CLI%3EWhen%20there%20is%20a%20mismatch%20of%20the%20label%20of%20a%20container%20versus%20that%20of%20a%20file%20inside%20the%20container%2C%20then%20this%20can%20be%20audited.%3C%2FLI%3E%0A%3CLI%3EThe%20application%20of%20a%20sensitivity%20label%20at%20the%20Team%20container%20level%20prevents%20inappropriate%20%2F%20external%20team%20members%20from%20being%20added%20to%20the%20Team.%26nbsp%3B%20This%20prevents%20oversharing%20from%20occurring%20in%20the%20first%20place.%3C%2FLI%3E%0A%3CLI%3EPrivacy%20labels%20(Private%2C%20org-wide%20%26amp%3B%20public).%20These%20Sensitivity%20Labels%20are%20linked%20to%20the%20corresponding%20setting%20in%20the%20Container%2FSite%20configuration.%3CUL%3E%0A%3CLI%3E%3CU%3EPrivate%3C%2FU%3E%20%E2%80%93%20data%20stays%20inside%20a%20certain%20group%20of%20users%20within%20the%20organization%3C%2FLI%3E%0A%3CLI%3E%3CU%3EOrg-wide%3C%2FU%3E%20%E2%80%93%20data%20stays%20inside%20the%20organization%3C%2FLI%3E%0A%3CLI%3E%3CU%3EPublic%3C%2FU%3E%20%E2%80%93%20data%20available%20for%20access%20outside%20the%20organization%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--1194280323%22%20id%3D%22toc-hId--1194275544%22%3EPre-requisites%3C%2FH1%3E%0A%3CUL%3E%0A%3CLI%3ECreate%20a%20Sensitive%20Information%20Type%20(SIT)%20in%20Part%201%20OR%20an%20Exact%20Data%20Match%20(EDM)%20in%20Part%201a%20of%20this%20blog%20series.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1040968171%22%20id%3D%22toc-hId-1040972950%22%3EAdding%20the%20ability%20to%20label%20Containers%20and%20Sites%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EOn%20a%20VM%20connected%20to%20your%20AAD%20test%20tenant%2C%20run%20the%20following%20Powershell%20commands%20in%20Powershell_ISE%20with%20elevated%20rights%3A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EInstall-Module%20AzureADPreview%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EImport-Module%20AzureADPreview%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EConnect-AzureAD%20(this%20last%20command%20will%20ask%20for%20an%20administrative%20account%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_0-1646258682951.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352511iA671C796113B2EF6%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_0-1646258682951.png%22%20alt%3D%22James_Havens_0-1646258682951.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%222%22%3E%0A%3CLI%3ENext%20run%20these%20following%20commands%3A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%24setting%20%3D%20(Get-AzureADDirectorySetting%20%7C%20where%20-Property%20DisplayName%20-Value%20%22Group.Unified%22%20-EQ)%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_1-1646258682958.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352512iBBA343B93786211B%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_1-1646258682958.png%22%20alt%3D%22James_Havens_1-1646258682958.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%24template%20%3D%20Get-AzureADDirectorySettingTemplate%20-Id%2062375ab9-6b52-47ed-826b-58e47e0e304b%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_2-1646258682962.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352513i467690107E35ECBD%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_2-1646258682962.png%22%20alt%3D%22James_Havens_2-1646258682962.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%24setting%20%3D%20%24template.CreateDirectorySetting()%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_3-1646258682963.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352514i999879AA48C2838D%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_3-1646258682963.png%22%20alt%3D%22James_Havens_3-1646258682963.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CU%3Enote%3C%2FU%3E%20-%20you%20might%20need%20to%20run%20these%20individually%20as%20compared%20to%20being%20part%20of%20PS%20script%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%223%22%3E%0A%3CLI%3EVerify%20that%20the%20settings%20have%20been%20updated.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EIn%20a%20Command%20Prompt%2C%20check%20your%20settings%20with%20this%20command.%26nbsp%3B%20It%20should%20look%20like%20the%20following%20with%203%20Falses%20at%20the%20top%20and%20then%203%20Trues%20at%20the%20bottom.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%24Setting.Values%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_4-1646258682970.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352516iC36EF07EE46B2F2F%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_4-1646258682970.png%22%20alt%3D%22James_Havens_4-1646258682970.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%224%22%3E%0A%3CLI%3EEnable%20the%20MIP%20Labels%20(this%20is%20the%20top%20value%20above.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%24Setting%5B%22EnableMIPLabels%22%5D%20%3D%20%22True%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_5-1646258682972.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352515iFB4D10463C91A110%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_5-1646258682972.png%22%20alt%3D%22James_Havens_5-1646258682972.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%225%22%3E%0A%3CLI%3EVerify%20your%20settings%20have%20changed%20with%20this%20command%20by%20rerunning%20the%20command%20from%20above%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%24Setting.Values%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_6-1646258682993.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352519i52577AD7755007AC%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_6-1646258682993.png%22%20alt%3D%22James_Havens_6-1646258682993.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%226%22%3E%0A%3CLI%3ESave%20the%20changes%20to%20AAD%20with%20the%20following%20command%20line%3A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3ENew-AzureADDirectorySetting%20-DirectorySetting%20%24setting%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_7-1646258682994.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352517iDEC5508C6AF8F56E%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_7-1646258682994.png%22%20alt%3D%22James_Havens_7-1646258682994.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%227%22%3E%0A%3CLI%3EInstall%20Exchange%20module%20(if%20needed)%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EInstall-Module%20ExchangeOnlineManagement%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_8-1646258682996.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352518iAEE5648E3D629A15%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_8-1646258682996.png%22%20alt%3D%22James_Havens_8-1646258682996.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%228%22%3E%0A%3CLI%3ENext%20import%20the%20ExchangeOnlineManagement.%26nbsp%3B%20Run%20this%20PowerShell%20command%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EImport-Module%20ExchangeOnlineManagement%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_9-1646258682997.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352520i26A2CD61A9464302%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_9-1646258682997.png%22%20alt%3D%22James_Havens_9-1646258682997.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CU%3ENote%3C%2FU%3E%20%E2%80%93%20you%20will%20need%20to%20allow%20for%20scripts%20to%20be%20run%2C%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%229%22%3E%0A%3CLI%3EThis%20Powershell%20script%20will%20tell%20you%20if%20you%20can%20execute%20the%20Import-Module%20policy%20above%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EGet-ExecutionPolicy%20-List%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_10-1646258683003.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352521i23A4179A894F1828%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_10-1646258683003.png%22%20alt%3D%22James_Havens_10-1646258683003.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%2210%22%3E%0A%3CLI%3EThis%20PowerShell%20script%20will%20allow%20you%20to%20run%20the%20Import-Module%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3ESet-ExecutionPolicy%20Unrestricted%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_11-1646258683004.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352522iA71E5CC14A29CFCC%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_11-1646258683004.png%22%20alt%3D%22James_Havens_11-1646258683004.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%2211%22%3E%0A%3CLI%3ERun%20this%20Powershell%20script%20again%20to%20verify%20that%20the%20Local%20Machine%20has%20changed%20to%20Unrestricted%E2%80%9D%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EGet-ExecutionPolicy%20-List%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_12-1646258683018.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352525iFFA86831426DF818%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_12-1646258683018.png%22%20alt%3D%22James_Havens_12-1646258683018.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3E%3CU%3ENote%3C%2FU%3E%20%E2%80%93%20documentation%20on%20the%20Get0ExecutionPolicy%20PowerShell%20script%20is%20in%20the%20Appendix%20and%20Links%20section%20below.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%2212%22%3E%0A%3CLI%3ERun%20this%20Powershell%20script%20to%20connect%20your%20IP%20session.%26nbsp%3B%20You%20will%20need%20your%20administrator%20account%20name.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EConnect-IPPSSession%20-UserPrincipalName%20username%20UPN.%26nbsp%3B%20%3CUPN%3E%20is%20your%20account%20in%20user%20principal%20name%20format%20(ex%20%3CA%20href%3D%22mailto%3Aadmin%40companyx.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Eadmin%40companyx.com%3C%2FA%3E%20)%3C%2FUPN%3E%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_13-1646258683021.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352523iF8A5C3839F67D9E6%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_13-1646258683021.png%22%20alt%3D%22James_Havens_13-1646258683021.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%2213%22%3E%0A%3CLI%3EYou%20will%20see%20this%20message%20indicating%20the%20PowerShell%20script%20is%20running.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_14-1646258683024.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352524i995645AD74E8135D%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_14-1646258683024.png%22%20alt%3D%22James_Havens_14-1646258683024.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%2214%22%3E%0A%3CLI%3EThe%20last%20step%20is%20to%20execute%20the%20following%20PowerShell%20script%20to%20synchronize%20your%20labels%20so%20they%20can%20be%20applied%20to%20SharePoint%20and%20Teams%20Grops%20and%20Sites.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EExecute-AzureAdLabelSync%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22James_Havens_15-1646258683025.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352526i8ED9E79D8CB55631%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22James_Havens_15-1646258683025.png%22%20alt%3D%22James_Havens_15-1646258683025.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%20start%3D%2215%22%3E%0A%3CLI%3EYou%20can%20now%20create%20and%20publish%20our%20Sensitivity%20Labels.%26nbsp%3B%20Proceed%20to%20Part%202b%20of%20this%20blog%20series%20%E2%80%9CAdding%20a%20Sensitivity%20Label%20to%20a%20Container%20and%2For%20Site%E2%80%9D%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--766486292%22%20id%3D%22toc-hId--766481513%22%3EAppendix%20and%20Links%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels-teams-groups-sites%3Fview%3Do365-worldwide%23enable-this-preview-and-synchronize-labels%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUse%20sensitivity%20labels%20with%20Microsoft%20Teams%2C%20Microsoft%20365%20groups%2C%20and%20SharePoint%20sites%20-%20Microsoft%20365%20Compliance%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fenterprise-users%2Fgroups-assign-sensitivity-labels%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAssign%20sensitivity%20labels%20to%20groups%20-%20Azure%20AD%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fexchange%2Fconnect-to-scc-powershell%3Fview%3Dexchange-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConnect%20to%20Security%20%26amp%3B%20Compliance%20Center%20PowerShell%20using%20the%20EXO%20V2%20module%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fenterprise-users%2Fgroups-assign-sensitivity-labels%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAssign%20sensitivity%20labels%20to%20groups%20-%20Azure%20AD%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fsensitivity-labels%3Fview%3Do365-worldwide%23label-scopes%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ELearn%20about%20sensitivity%20labels%20-%20Microsoft%20365%20Compliance%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Foffice%2Fadding-guests-to-microsoft-365-groups-bfc7a840-868f-4fd6-a390-f347bf51aff6%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAdding%20guests%20to%20Microsoft%20365%20Groups%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-cloud-apps%23tag-resources-with-authentication-contexts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECloud%20apps%2C%20actions%2C%20and%20authentication%20context%20in%20Conditional%20Access%20policy%20-%20Azure%20Active%20Directory%20%7C%20Microsoft%20Docs%3C%2FA%3E%20%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fpurview%2Fcreate-sensitivity-label%23define-autolabeling-rules-for-database-columns%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ELabeling%20in%20Azure%20Purview%20-%20Azure%20Purview%20%7C%20Microsoft%20Docs%3C%2FA%3E%20%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-cloud-apps%23tag-resources-with-authentication-contexts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECloud%20apps%2C%20actions%2C%20and%20authentication%20context%20in%20Conditional%20Access%20policy%20-%20Azure%20Active%20Directory%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fenterprise-users%2Fgroups-assign-sensitivity-labels%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAssign%20sensitivity%20labels%20to%20groups%20-%20Azure%20AD%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-US%2Fsharepoint%2Fcreate-site-collection%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ECreate%20a%20site%20-%20SharePoint%20in%20Microsoft%20365%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fexchange%2Fexchange-online-powershell-v2%3Fview%3Dexchange-ps%23install-and-maintain-the-exo-v2-module%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAbout%20the%20Exchange%20Online%20PowerShell%20V2%20module%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fmicrosoft.powershell.security%2Fset-executionpolicy%3Fview%3Dpowershell-7.2%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESet-ExecutionPolicy%20(Microsoft.PowerShell.Security)%20-%20PowerShell%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-3243344%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22paint_by_numbers_splash_picture.jpg%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F352527i4035DE6FDEE681CB%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22paint_by_numbers_splash_picture.jpg%22%20alt%3D%22paint_by_numbers_splash_picture.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3243344%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHealthcare%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ELife%20Sciences%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Apr 20 2022 12:39 PM
Updated by: