DLP Exception for "Permission Controlled" Not Working (Microsoft Purview | RMS Template | Encrypt)
Hello, We are in the process of moving some of our mail-flow / transport rules over to Microsoft Purview. We don't want the DLP policy to apply when people click their "Encrypt" or "Do not Forward" buttons (RMS templates; OME encryption.) Putting "Permission Controlled" in the exceptions group should theoretically let the emails go through.The exception we have for when people put "Encrypt" in the subject line works (we have a mail-flow rule that encrypts those emails.) But actually clicking "Options" > "Set permissions on this item" > "Encrypt" doesn't remove the policy tip on an email draft, and people are unable to send the emails. Can someone verify that this rule is constructed properly? If so, we may have to reach out to Microsoft Support. Thank you so much for your time and help!
Safelinks - is there a way to mark a site as safe to bypass?
Hey All: We use a 3rd party SaaS service in healthcare. When users need to reset their PW, they can use a PW reset form. An email comes in with a one time use URL. We figured out that Outlook Webmail users, when they click on it, the SAFELINKS feature intercepts/scans which invalidates the one time use of the URL. When the users ultimately get the web page, it says that the LINK has already expired. Is there a way to configure the M365/O365 tenancy somewhere, (Windows Defender policy?) to add a domain as safe to that the sa
I am unable to get the User Usage details for the Microsoft VISIO and Microsoft Project
In my Organization we have purchased theMicrosoft VISIO and Microsoft Project licensed version and my management wants to know the users usage details of those apps but I am unable to get those details in audit log and anywhere. Please advise where will I get those details.
How to reset 365 user
Hi, I'm learning and investigating MS 365 work for 130 users. I am looking for steps to reset the user profile/account as many users experience simple but enjoying issues: When connected to the company network wifi, sadly can be disconnected. It doesn't matter what laptop is it. BartoszHELP - None of my users can sign in to any office product - Unable to verify token signature
Hello, I'm 3 weeks into a new job at a remote based company. We are using Google Workspace as our main system for emails, files, users etc. However we use Office 365 for office products and currently nobody can sign in including me the admin. It's set up for SSO log in to 365 using our Google domain accounts. From Google workspace side everything looks okay. SAML SSO settings are all on and set. However when trying to get into our microsoft suite we get multiple errors depending on what portal are trying to log in to. The most informative error I have is below when trying to sign in to admin using powershell: WARNING: Unable to acquire token for tenant 'organizations' with error 'InteractiveBrowserCredential authentication failed: AADSTS5000811: Unable to verify token signature. The signing key identifier does not match any valid registered keys. Trace ID: 253879cc-6402-41fa-8832-21045a2b8200 Correlation ID: a6bd5020-19dc-47eb-ac84-246df06b1515 Timestamp: 2024-03-07 10:27:29Z' WARNING: Please run 'Connect-AzAccount -DeviceCode' if browser is not supported in this session. Connect-AzAccount: InteractiveBrowserCredential authentication failed: AADSTS5000811: Unable to verify token signature. The signing key identifier does not match any valid registered keys. Trace ID: 253879cc-6402-41fa-8832-21045a2b8200 Correlation ID: a6bd5020-19dc-47eb-ac84-246df06b1515 Timestamp: 2024-03-07 10:27:29Z I'm really stuck. I have found fixes online but you need to be logged in as admin to apply the fixes and my issue is I can't log in as admin! None of the company can log in at all. Please can someone help. I have logged a microsoft support ticket but it's been a week and still no help. Thank you.Take over an account managed by an external company
Hello, I have a Microsoft 365 Business Standard account:NameExample(at)mydomainexample.onmicrosoft.com which is managed by an external company. So I don't have admin rights on it. By contacting the company, can they detach NameExample(at)mydomainexample.onmicrosoft.com from their account and make it independent? There is only this account attached to this domain. If this is not possible, what would be the procedure for creating new accounts while keeping @mydomainexample.onmicrosoft.com and migrating the current account NameExample(at)mydomainexample.onmicrosoft.com? Thank you for your feedback.
