SOLVED

DLP policy can apply for E1 license ?

%3CLINGO-SUB%20id%3D%22lingo-sub-338443%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338443%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%2C%3CBR%20%2F%3E%3CBR%20%2F%3E1.)%20DLP%20cannot%20be%20applied%20to%20E1%20licences.%20DLP%20needs%20a%20plan%20with%20Exchange%20Online%20Plan%202.%20See%20Office%20365%20service%20description%20here%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fservicedescriptions%2Foffice-365-platform-service-description%2Foffice-365-platform-service-description%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fservicedescriptions%2Foffice-365-platform-service-description%2Foffice-365-platform-service-description%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E2.)%20Yes%2C%20however%20there%20is%20the%20caveat%20that%20DLP%20does%20cover%20mail%20sent%20between%20on%20premise%20users.%20See%20article%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fsecurity-and-compliance%2Fdata-loss-prevention%2Fdata-loss-prevention%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fsecurity-and-compliance%2Fdata-loss-prevention%2Fdata-loss-prevention%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E3.)%20Yes%2C%20confirmed%20in%20this%20Technet%20article%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F60f94c58-3795-41bd-a813-0b5237584a50%2Fis-it-possible-to-apply-eop-with-dlp-scanning-to-outbound-smtp-sending%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2F60f94c58-3795-41bd-a813-0b5237584a50%2Fis-it-possible-to-apply-eop-with-dlp-scanning-to-outbound-smtp-sending%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20answers%20your%20questions%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338440%22%20slang%3D%22en-US%22%3EDLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338440%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20i%20have%20some%20question%20about%20DLP%20policy%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%201.%20Policy%20DLP%20can%20apply%20with%20user%20E1%20license%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%202.%20Policy%20DLP%20can%20apply%20for%20user%20from%20local%20send%20email%20to%20cloud%20(hybrid%20exchange)%20and%20from%20cloud%20to%20local%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%203.%20Policy%20DLP%20can%20apply%20for%20user%20from%20local%20relay%20to%20office365%20EOP%20and%20send%20outsite%20to%20gmail%20%3F%3C%2FP%3E%3CP%3EBest%20Regards%2C%3C%2FP%3E%3CP%3EThanks%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-338440%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338447%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338447%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%26nbsp%3B%3CSPAN%3E1.)%20DLP%20cannot%20be%20applied%20to%20E1%20licences.%20DLP%20needs%20a%20plan%20with%20Exchange%20Online%20Plan%202.%20See%20Office%20365%20service%20description%20here%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20-%26gt%3B%20If%20So%20instead-of%20create%20DLP%20policy%20then%20I%20can%20create%20Rule%20email%20to%20it%20apply%20for%20all%20user%20%3F%20and%20also%20will%20apply%20E1%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338452%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338452%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20DLP%20policy%20will%20be%20applied%20org-wide%20in%20the%20security%20and%20compliance%20centre%2C%20however%2C%20as%20the%20service%20description%20states%20it%20shouldn't%20apply%20explicitly%20to%20the%20users%20with%20the%20E1%20licences%20when%20doing%20DLP%20checks.%20It%20would%20be%20very%20interesting%20to%20discover%20if%20it%20did%2C%20because%20that%20would%20actually%20contradict%20the%20service%20agreement.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20693px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F74826iB84F94130FE9DFBE%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22DLP365.PNG%22%20title%3D%22DLP365.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%2C%20Chris%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-338532%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-338532%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20although%20i%20has%20create%20rule%20mail%20with%20sensitive%20infomation%20then%20if%20user%20assign%20E1%20then%20this%20rule%20will%20not%20scan%20%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F74842i5AEAB885C46F4AEC%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture.PNG%22%20alt%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-339317%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339317%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20I%20just%20create%20DLP%20policy%20(not%20rule)%26nbsp%3B%3CSPAN%3Eand%20test%26nbsp%3B%20with%20E1%20license%20seem%20it%20work%20with%20policy%20.so%20then%20it%20can%20apply%20E1%20and%20E3%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-339320%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339320%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%2C%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20have%20tested%20it%2C%20and%20it%20works%20with%20a%20user%20with%20E1%20and%20experiencing%20exactly%20what%20you%20get%20with%20E3%20then%20I%20guess%20it%20works%20and%20it%20resolves%20your%20issue!%20However%2C%20just%20a%20caveat%20that%20if%2C%20for%20some%20reason%2C%20you%20have%20an%20issue%20then%20Microsoft%20may%20not%20support%20it%20if%20it%20deviates%20from%20the%20service%20terms.%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-339325%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20policy%20can%20apply%20for%20E1%20license%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-339325%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20sounds%20like%20a%20license%20violation%20to%20me%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Regular Contributor

Hello

    i have some question about DLP policy 

    1. Policy DLP can apply with user E1 license ?

    2. Policy DLP can apply for user from local send email to cloud (hybrid exchange) and from cloud to local

    3. Policy DLP can apply for user from local relay to office365 EOP and send outsite to gmail ?

Best Regards,

Thanks 

7 Replies
Highlighted
Solution

Hi @Tien Ngo Thanh,

1.) DLP cannot be applied to E1 licences. DLP needs a plan with Exchange Online Plan 2. See Office 365 service description here

https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-descripti...

2.) Yes, however there is the caveat that DLP does cover mail sent between on premise users. See article

https://docs.microsoft.com/en-us/exchange/security-and-compliance/data-loss-prevention/data-loss-pre...

3.) Yes, confirmed in this Technet article

https://social.technet.microsoft.com/Forums/en-US/60f94c58-3795-41bd-a813-0b5237584a50/is-it-possibl...

Hope that answers your questions

Best, Chris

Highlighted

    1.) DLP cannot be applied to E1 licences. DLP needs a plan with Exchange Online Plan 2. See Office 365 service description here

    -> If So instead-of create DLP policy then I can create Rule email to it apply for all user ? and also will apply E1

 

Highlighted

Hi @Tien Ngo Thanh,

 

The DLP policy will be applied org-wide in the security and compliance centre, however, as the service description states it shouldn't apply explicitly to the users with the E1 licences when doing DLP checks. It would be very interesting to discover if it did, because that would actually contradict the service agreement.

 

DLP365.PNG

 

Best, Chris

Highlighted

So although i has create rule mail with sensitive infomation then if user assign E1 then this rule will not scan ?

Capture.PNG

Highlighted

    I just create DLP policy (not rule) and test  with E1 license seem it work with policy .so then it can apply E1 and E3

 

Highlighted
Hi @Tien Ngo Thanh,

If you have tested it, and it works with a user with E1 and experiencing exactly what you get with E3 then I guess it works and it resolves your issue! However, just a caveat that if, for some reason, you have an issue then Microsoft may not support it if it deviates from the service terms.

Best, Chris
Highlighted

Yes, sounds like a license violation to me :)