DLP Policies not getting synced and updated - also not restricting on sensitive sites on browsers

Question

DLP Policies not getting synced and updated - also not restricting on sensitive sites on browsers

Jayshinee Nundloll 0

Hello Team,

I have configured multiple DLP policies on my tenant, but only 3 out of 10 policies have successfully synced and updated on my test device.

Additionally, the browser restrictions are not functioning as expected. Despite the policy being set to "block," it is not enforcing restrictions on sensitive sites. However, I can see that the activity is being logged in the Activity Explorer.

Could you please provide guidance on this?

Thank you,

Best Regards,

Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-11-29T10:28:18.91+00:00
Hi @Jayshinee Nundloll

Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

It sounds like you are experiencing issues with Data Loss Prevention (DLP) policies not syncing properly and not enforcing restrictions on sensitive sites in your Microsoft Purview environment. Here are some troubleshooting steps that might help you.

Check Policy Sync Status - Ensure that the policies are correctly configured and that the devices are properly onboarded. You can check the sync status in the Microsoft Purview portal under Device onboarding settings. If the status is "Not updated" or "Not available," follow the remediation steps provided in the details pane.

Browser Restrictions - For the browser restrictions to function correctly, ensure that the policies are set correctly to "block" and that the sensitive sites are properly defined in the policy. If the policy is not being enforced, verify that the Microsoft Purview Chrome Extension is installed and that the browser being used is supported.

Audit and Restrict Activities - Make sure that the action for sensitive sites is set to "Audit or restrict activities" and that you have selected the appropriate user activities to monitor or restrict.

Configuration Review - Review the configurations of the DLP policies to ensure that they are scoped correctly to the Devices location and that the rules are set up to apply to the intended users and sites.

By following these troubleshooting steps, you should be able to identify the root cause of both the DLP policy syncing issue and the browser restriction enforcement issue.

For more details, please refer the below documentation:

Use Endpoint data loss prevention

Troubleshooting endpoint data loss prevention configuration and policy sync

I hope this information helps. Please do let us know if you have any further queries.

Thank you.
Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-12-02T02:29:52.8566667+00:00

@Jayshinee Nundloll

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Jayshinee Nundloll 0 Reputation points

2024-12-02T05:22:34.23+00:00

Hello,

Some of the policies have started syncing, but the policy sync status shows as "Updated," with only 3 out of 10 policies listed as updated. The sync process cannot be manually forced since the option to sync the policy is greyed out. Is there a way to resolve this issue?

Additionally, I’m troubleshooting restrictions for browsers. While copying to sensitive sites is successfully being blocked, I’m trying to restrict the uploading of documents containing sensitive information, and this functionality is not working as expected.
Jayshinee Nundloll 0 Reputation points

2024-12-02T05:23:08.34+00:00

Hello,

Some of the policies have started syncing, but the policy sync status shows as "Updated," with only 3 out of 10 policies listed as updated. The sync process cannot be manually forced since the option to sync the policy is greyed out. Is there a way to resolve this issue?

Additionally, I’m troubleshooting restrictions for browsers. While copying to sensitive sites is successfully being blocked, I’m trying to restrict the uploading of documents containing sensitive information, and this functionality is not working as expected.
Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-12-04T10:12:08.27+00:00
@Jayshinee Nundloll

Thank you for the additional details. Based on your description, it seems that you're facing two distinct issues—one related to policy syncing and the other with browser restrictions. Here are some troubleshooting steps and potential resolutions.

DLP Policy Syncing Issues:

The fact that only 3 out of 10 policies are showing as "Updated" and that the manual sync option is greyed out suggests that there might be some underlying issues with the sync process.

Review Policy Scope and Conditions - Ensure that the policies are correctly scoped to the relevant users, devices, and locations. Sometimes policies may not apply if the conditions are too restrictive or not correctly configured.

Check Device Onboarding Status - Verify that the test devices are properly onboarded and connected to the Microsoft Purview service. Devices need to be correctly onboarded for policies to sync and apply.

Policy Prioritization - Ensure that there are no conflicts between policies. Sometimes, higher priority policies can override others, preventing them from being applied.

Review the Sync Status - Check the sync status of your DLP policies in the DLP Policy section within the Microsoft Purview portal. If the policies are not syncing as expected, they might show an error message or warning that can provide more details.

Policy Sync Interval - Be aware that policy sync intervals can vary. Allow some time for the policies to propagate and check back later to see if the remaining policies have synced.

Browser Restrictions Not Blocking Document Uploads:

You mentioned that copying to sensitive sites is being blocked successfully, but restricting the upload of sensitive documents is not working as expected.

Browser Extension - For DLP policies to be enforced in browsers, the Microsoft Purview (formerly Microsoft Defender for Endpoint) browser extension must be installed and enabled on the supported browsers (e.g., Chrome, Edge).

Policy Configuration - Double-check the DLP policy settings related to browser restrictions. Ensure that the action is set to “block” for uploading sensitive information and that the correct conditions are specified.

Supported Browsers - Verify that you are using a supported browser. Microsoft Purview DLP policies may not work as expected on unsupported browsers.

Activity Logs - Since the activity is being logged in the Activity Explorer, review these logs to understand the actions being taken and identify any discrepancies.

I hope this information helps. Please do let us know if you have any further queries.

Thank you.
Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-12-05T02:01:50.2666667+00:00

@Jayshinee Nundloll

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-12-06T01:19:12.64+00:00

@Jayshinee Nundloll

Following up to see on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Your answer

Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-11-29T10:28:18.91+00:00

Hi @Jayshinee Nundloll

Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

It sounds like you are experiencing issues with Data Loss Prevention (DLP) policies not syncing properly and not enforcing restrictions on sensitive sites in your Microsoft Purview environment. Here are some troubleshooting steps that might help you.

Check Policy Sync Status - Ensure that the policies are correctly configured and that the devices are properly onboarded. You can check the sync status in the Microsoft Purview portal under Device onboarding settings. If the status is "Not updated" or "Not available," follow the remediation steps provided in the details pane.

Browser Restrictions - For the browser restrictions to function correctly, ensure that the policies are set correctly to "block" and that the sensitive sites are properly defined in the policy. If the policy is not being enforced, verify that the Microsoft Purview Chrome Extension is installed and that the browser being used is supported.

Audit and Restrict Activities - Make sure that the action for sensitive sites is set to "Audit or restrict activities" and that you have selected the appropriate user activities to monitor or restrict.

Configuration Review - Review the configurations of the DLP policies to ensure that they are scoped correctly to the Devices location and that the rules are set up to apply to the intended users and sites.

By following these troubleshooting steps, you should be able to identify the root cause of both the DLP policy syncing issue and the browser restriction enforcement issue.

For more details, please refer the below documentation:

Use Endpoint data loss prevention

Troubleshooting endpoint data loss prevention configuration and policy sync

I hope this information helps. Please do let us know if you have any further queries.

Thank you.
Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-12-02T02:29:52.8566667+00:00

@Jayshinee Nundloll

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Jayshinee Nundloll 0 Reputation points

2024-12-02T05:22:34.23+00:00

Hello,

Some of the policies have started syncing, but the policy sync status shows as "Updated," with only 3 out of 10 policies listed as updated. The sync process cannot be manually forced since the option to sync the policy is greyed out. Is there a way to resolve this issue?

Additionally, I’m troubleshooting restrictions for browsers. While copying to sensitive sites is successfully being blocked, I’m trying to restrict the uploading of documents containing sensitive information, and this functionality is not working as expected.
Jayshinee Nundloll 0 Reputation points

2024-12-02T05:23:08.34+00:00

Hello,

Some of the policies have started syncing, but the policy sync status shows as "Updated," with only 3 out of 10 policies listed as updated. The sync process cannot be manually forced since the option to sync the policy is greyed out. Is there a way to resolve this issue?

Additionally, I’m troubleshooting restrictions for browsers. While copying to sensitive sites is successfully being blocked, I’m trying to restrict the uploading of documents containing sensitive information, and this functionality is not working as expected.
Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-12-05T02:01:50.2666667+00:00

@Jayshinee Nundloll

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Chandra Boorla 15,480 Reputation points Microsoft External Staff Moderator

2024-12-06T01:19:12.64+00:00

@Jayshinee Nundloll

Following up to see on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.