Label Policy Set to "Same as Document" But Outlook does not apply the correct label

Question

Label Policy Set to "Same as Document" But Outlook does not apply the correct label

Jacob Ellis 66

When Setting a Label Policy I have chosen to set the default label to "Same as Document"

However, when a labeled document, either auto or self labeled is added to an email it does not change the sensitivity of the email. This is causing issues where the label is used as a condition in a DLP policy. Is this the expected behavior?

Accepted answer

0 additional answers

Your answer

Answer 1

Shweta Mathur 30,296 Microsoft Employee Moderator

Hi @JacobEllis-2694 ,

Thanks for reaching out.

I understand you want to apply the same label to email which has been applied in the document attached in the email.

As per info mentioned, it specifies to automatically apply the label policy you defined earlier based on the sensitive info type condition to avoid manual labelling while sending the email.

This drop-down option "same as document" seems to be little confusing here. This implies to choose the same label which has been selected for documents but that does not specify to apply same label automatically to email as per attachment.

Let say, you have selected confidential label for bank accounts' data for word document, then same confidential label has been applied to mail automatically when you add bank accounts' numbers in email, but it will not pick the label as attachment.

Refer to apply sensitivity label to files, emails and attachments.

Hope this will help.

Thanks,
Shweta

----------------------------------

Please remember to "Accept Answer" if answer helped you.

Jacob Ellis 66 Reputation points

2022-07-08T07:51:19.237+00:00

Thank you for the response and this was my first thought. I currently have a auto-label policy in sim mode to test this.

However,

My issue is with the policy tips. I cannot create a label based on a label, only SIT’s. The label itself is set to auto label certain SIT’s with encrypting the item selected. The DLP policy does not seem to be able to detect a SIT in an encrypted attachment only the metadata or the label that has been applied. I have tested this by creating exclusions etc.

So, what ends up happening is the confidential label is detected, and the associated policy tip for that policy shows. When the email is sent, the content is evaluated and blocked due to a more restrictive policy based on SIT’s lower in the DLP policy order.

I have removed a user group from the label policy and had them test. The sensitive information is not detected within the encrypted document, there is not a policy tip generated that allows override, so the email is dropped / blocked.
I

Share via

Label Policy Set to "Same as Document" But Outlook does not apply the correct label

0 additional answers

Your answer