DLP policy to notify users that their email is forwarded to external user

Question

DLP policy to notify users that their email is forwarded to external user

Microsoft Q & A 376

Want to know how i can achieve this. Please share the steps.

Create a test label.
Create an EXO rule: apply label when the recipient is member of a group.
Create DLP policy: if message contains the label >> notify sender with email and policy tip.

Jarvis Sun-MSFT 6,836 Reputation points Microsoft Vendor

2023-09-19T06:13:36.1633333+00:00

I wanted to follow up and know if the below responses helped in answering your query. If it did, please do not forget to accept the appropriate response as Answer so that others in the community facing similar issues can easily find the solution.

Jarvis Sun-MSFT 6,836 Reputation points Microsoft Vendor

2023-09-19T06:13:36.1633333+00:00

I wanted to follow up and know if the below responses helped in answering your query. If it did, please do not forget to accept the appropriate response as Answer so that others in the community facing similar issues can easily find the solution.

Answer 1

Jarvis Sun-MSFT 6,836 Microsoft Vendor

Hi @Microsoft Q & A，

Thanks for posting in our Q&A forum.

Regarding of your requirements, I can help you with some steps to achieve your goal.

To create a test label, you can use the New-Label cmdlet in PowerShell. For example: New-Label -Name "Test Label" -DisplayName "Test Label" -Description "This is a test label"
To create an EXO rule to apply the label when the recipient is a member of a group, you can use the New-TransportRule cmdlet in PowerShell. For example: New-TransportRule -Name "Apply Test Label" -SentToMemberOf "Test Group" -ApplyClassification "Test Label"
To create a DLP policy to notify the sender with email and policy tip if the message contains the label, you can follow the instructions: https://learn.microsoft.com/en-us/exchange/security-and-compliance/data-loss-prevention/create-custom-dlp-policy

Hope this can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Microsoft Q & A 376

Getting below error while running 2nd command.

PS C:\WINDOWS\system32> New-TransportRule -Name "Apply Test Label" -SentToMemberOf "Test Group" -ApplyClassification "Test Label"
Write-ErrorMessage : |System.ArgumentException|Unable to find message classification with the following ID: 'Test Label'.
At C:\Users\Sanjay\AppData\Local\Temp\tmpEXO_oy1fk2i4.gj5\tmpEXO_oy1fk2i4.gj5.psm1:1184 char:13
+             Write-ErrorMessage $ErrorObject
+             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (ApplyClassification:String) [New-TransportRule], ArgumentException
    + FullyQualifiedErrorId : [Server=PN0P287MB0389,RequestId=399b5457-1a84-bc04-cbca-2cb3ee183955,TimeStamp=Sun, 10 Sep 2023 18:44:48 GMT],Write-ErrorMessage

Jarvis Sun-MSFT 6,836 Reputation points Microsoft Vendor

2023-09-14T08:31:43.6+00:00

@Microsoft Q & A The error message indicates that the message classification with the ID ‘Test Label’ could not be found. This error message is usually encountered when the classification does not exist or has been deleted. Please check if the classification exists and is correctly spelled. If it does not exist, you can create a new classification using the New-MessageClassification cmdlet .

DLP policy to notify users that their email is forwarded to external user

1 answer

Activity