How to export a existing DLP Policy schema and create a policy based on this schema using Power shell?

Koteswararao Kata 1

Hi Team, We want to export a existing custom dlp policy schema and need to create a dlp policy based on the schema using powershell. Any suggestions or ideas over the possibilities?

2 answers

Vasil Michev 94,521 Reputation points MVP

2021-03-15T18:58:38.097+00:00

Your best bet is the Export-DlpPolicyCollection cmdlet: https://learn.microsoft.com/en-us/powershell/module/exchange/export-dlppolicycollection?view=exchange-ps
You can also take a look at M365 DSC, which includes DLP policies configuration: https://github.com/microsoft/Microsoft365DSC
Please sign in to rate this answer.
Koteswararao Kata 1 Reputation point

2021-03-16T04:35:43.907+00:00

Hi Michev,

Thanks for your quick reply, we have tried Export-DlpPolicyCollection as well. but unfortunately not working. Tried the below code snippet as resultant below xml schema got exported to xml file at given location.

$file = Export-DlpPolicyCollection
Set-Content -Path "C:\My Documents\Contoso PII.xml" -Value $file.FileData -Encoding Byte

Result:
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<dlpPolicies />

Though our policy containing multiple rules and actions, nothing was exporting.

Also when ever there is a change in any particular DLP policy we have to apply the same changes to the policies created based on this particular policy template using PowerShell, can you help over this scenario as well.
Sign in to comment
Lucas Liu-MSFT 6,161 Reputation points

2021-03-16T06:17:54.737+00:00

Hi @Koteswararao Kata ,
Please try to create a new DLP policy in Exchange admin center and try to run the above command again. Then check to see if the correct XML file is exported.

At present, I have not found a command line to update all DLP policies that apply the same custom template at the same time. I will continue to search and research, and I will update if there are any findings.

----------

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Koteswararao Kata 1 Reputation point

2021-03-16T07:08:06.963+00:00

Hi LucasLiu-MSFT,

Thanks for your quick help.

Export-DlpPolicyCollection only working to export the exchange level DLP Policy, But in our case we want to export Office 365 Security and Compliance center DLP Policy as template.

Any idea over the same, your help must appreciated.

Regards
Koteswararao

Lucas Liu-MSFT 6,161 Reputation points

2021-03-18T09:36:54.99+00:00

Hi @Koteswararao Kata ,
According to my test, you could following the steps in the below link to connect to Security & Compliance Center PowerShell, then run the following command to export the DLP policy in Office 365 Security and Compliance center.

$file = Export-DlpPolicyCollection Set-Content -Path <> -Value $file.FileData -Encoding Byte

Please refer to: Connect to Security & Compliance Center PowerShell

----------

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Lucas Liu-MSFT 6,161 Reputation points

2021-03-23T10:10:19.3+00:00

Hi @Koteswararao Kata ,
Do suggestions above help? If the issue has been resolved, please click “Accept as answer” to mark helpful reply as an answer, this will make answer searching in the forum easier and be beneficial to other community members as well.

Thanks for your understanding.

----------

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Lucas Liu-MSFT 6,161 Reputation points

2021-03-26T10:11:36.94+00:00

Hi @Koteswararao Kata ,
I am writing here to confirm with you how thing going now?

----------

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Sign in to comment