Compliance Exchange DLP Policy with Included and Excluded Groups not working as expected

Question

I can't seem to find a tag for Compliance!!! Hopefully this reaches someone.

I'm using a DLP Policy. It is working. I have an included and excluded group. I have a user that is a member of both groups.

Which one is supposed to win? I would think Excluded wins. But that is not what I am seeing.

Can anyone confirm this? I don't know the point of having Exclusions if it doesn't work.

Answer 1

Hi @ComputerHabit

In this article, it shows an example. If the user is both in these two groups, exclude could override include.

Data Loss Prevention policy reference | Microsoft Learn

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---