Sensitivity Labels, specifying trusted domains using OutlookJustifyTrustedDomains?

%3CLINGO-SUB%20id%3D%22lingo-sub-905553%22%20slang%3D%22en-US%22%3ESensitivity%20Labels%2C%20specifying%20trusted%20domains%20using%20OutlookJustifyTrustedDomains%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-905553%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20created%20several%26nbsp%3BSensitivity%20Labels%20and%20marked%20them%20as%20requiring%20justification%20to%20send%20to%20untrusted%20domains.%3C%2FP%3E%3CP%3ENow%20I%20want%20to%20define%20the%20domains%20which%20ARE%20trusted%20and%20bypass%20justification%20prompt%20using%26nbsp%3B%3CFONT%20face%3D%22courier%20new%2Ccourier%22%3E%3CSPAN%20class%3D%22TextRun%20SCXO119135596%20BCX5%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3ESet-%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellingError%20SCXO119135596%20BCX5%22%3ELabelPolicy%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E-Identity%20%22Global%22%20-%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellingError%20SCXO119135596%20BCX5%22%3EAdvancedSettings%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3E%26nbsp%3B%40%7B%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellingError%20SCXO119135596%20BCX5%22%3EOutlookJustifyTrustedDomains%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3E%3D%22%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22EOP%20SCXO119135596%20BCX5%22%3E%26nbsp%3B...%22%7D%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22EOP%20SCXO119135596%20BCX5%22%3EDoes%20this%20option%20imply%20subdomains%20are%20also%20trusted%3F%20In%20other%20words%20would%20-%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%20face%3D%22courier%20new%2Ccourier%22%3E%3CSPAN%20class%3D%22EOP%20SCXO119135596%20BCX5%22%3E%3CSPAN%20class%3D%22TextRun%20SCXO119135596%20BCX5%22%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3ESet-%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellingError%20SCXO119135596%20BCX5%22%3ELabelPolicy%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E-Identity%20%22Global%22%20-%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellingError%20SCXO119135596%20BCX5%22%3EAdvancedSettings%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3E%26nbsp%3B%40%7B%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellingError%20SCXO119135596%20BCX5%22%3EOutlookJustifyTrustedDomains%3C%2FSPAN%3E%3CSPAN%20class%3D%22NormalTextRun%20SCXO119135596%20BCX5%22%3E%3D%22contoso.com%3C%2FSPAN%3E%3C%2FSPAN%3E%22%7D%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Emean%20that%20emails%20to%20sales.contoso.com%2C%20finance.contoso.com%20etc.%20would%20NOT%20generate%20a%20justification%20prompt%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%20where%20can%20I%20report%20on%20the%20justifications%20users%20have%20input%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-905553%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1334608%22%20slang%3D%22en-US%22%3ERe%3A%20Sensitivity%20Labels%2C%20specifying%20trusted%20domains%20using%20OutlookJustifyTrustedDomains%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1334608%22%20slang%3D%22en-US%22%3E%3CP%3EAny%20feedback%20on%20this.%20looks%20like%20this%20doesn't%20honor%20Wild%20card%20as%20well.%3C%2FP%3E%3CP%3EHow%20can%20we%20exempt%20teams%20domain%20which%20has%20a%20format%3C%2FP%3E%3CP%3E%3CA%20href%3D%22mailto%3ACompany.onmicrosoft.com%40amer.teams.ms%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3ECompany.onmicrosoft.com%40amer.teams.ms%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I've created several Sensitivity Labels and marked them as requiring justification to send to untrusted domains.

Now I want to define the domains which ARE trusted and bypass justification prompt using Set-LabelPolicy -Identity "Global" -AdvancedSettings @{OutlookJustifyTrustedDomains=" ..."}

 

Does this option imply subdomains are also trusted? In other words would -

 

Set-LabelPolicy -Identity "Global" -AdvancedSettings @{OutlookJustifyTrustedDomains="contoso.com"}

 

mean that emails to sales.contoso.com, finance.contoso.com etc. would NOT generate a justification prompt?

 

Also where can I report on the justifications users have input?

 

 

 

 

1 Reply

Any feedback on this. looks like this doesn't honor Wild card as well.

How can we exempt teams domain which has a format

Company.onmicrosoft.com@amer.teams.ms

 

Thanks