This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(99.2, 79%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKK%3C/text%3E%3C/svg%3E)
Hi Team,
How to automate apply changes to child dlp policies those are done in master dlp policy using powershell?
Example: In case of any rule or action change in master policy we have find out the changes on periodic basis and need to apply them to child policies using any ps script.
Kindly help me over the possibilities and details procedure on high level.
Regards
Koteswararao
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
Hi @Koteswararao Kata ,
I've read through your post but not quite sure about what you are trying to achieve. Would you please clarify a bit more about what you mean by "child dlp policies" and "master dlp policy" so that we can understand better about your question?
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi YukiSun,
Requirement 1: Basically we want to export existing DLP Schema(assume as main policy or master policy) as a template and need to create more policies based the schema exported.
Requirement 2: In future if there is any changes in the main policy rules or actions we have to detect those changes on periodic basis then following we have to apply these changes to the other DLP policies(Assume as Child policies) created based on main policy.
Over all process we have to automate what all are the possibilities, your help must appreciated.
Hi @Koteswararao Kata ,
Thanks for the elaboration. I read through your description but based on my knowledge and research, I am afraid neither of the two requirements can be realized.
For Requirement 1, as we can learn from this article, DLP Policy templates are expressed as XML documents which adhere to certain schema. With the built-in features and cmdlet available, we can only export the DLP policy collections using the Export-DlpPolicyCollection cmdlet, but its output is far from adequate to develop a Policy template. Given this, you would need to refer to the first link mentioned earlier to manually developing the DLP policy template files based on your need.
For Requirement 2, per my understanding, the DLP policy is independent from the policy template after it's been created, therefore I'm afraid it's not feasible to make changes applied automatically to the "child policies" when a change is made in the "main policy".
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi @Koteswararao Kata ,
Just checked in to follow up with this thread. If you have any questions or need further help on this issue, please feel free to post back.
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.