Category: Microsoft
Category Archives: Microsoft
Advanced hunting does not return network protection logs
Hello,
I am able to find network protection logs in event viewer:
However, I can’t retrieve network protection logs using advanced hunting and KQL query:
https://help.redcanary.com/hc/en-us/articles/8265764276375-Turn-on-Microsoft-Network-Protection
DeviceNetworkEvents
|where ActionType in (‘ExploitGuardNetworkProtectionAudited’,’ExploitGuardNetworkProtectionBlocked’)
Am I missing something?
Thank you
Hello, I am able to find network protection logs in event viewer: However, I can’t retrieve network protection logs using advanced hunting and KQL query:https://help.redcanary.com/hc/en-us/articles/8265764276375-Turn-on-Microsoft-Network-Protection DeviceNetworkEvents|where ActionType in (‘ExploitGuardNetworkProtectionAudited’,’ExploitGuardNetworkProtectionBlocked’) Am I missing something? Thank you Read More
Matching the row numbers between two tables in two different Fabric Lakehouse
Hi,
I’ve implemented inside MS Fabric two lakehouses, the first one at Bronze layer and the second one at Silver layer.
Inside the two layers I’ve created the same table, f.e. Customers, doing some controls at Silver layer.
I need to check that the number of Customer rows at Bronze layer is equal to the number of Customer rows at Silver layer.
Is it possible to implement a such control in Microsoft Purview for Fabric? Thanks
Hi,I’ve implemented inside MS Fabric two lakehouses, the first one at Bronze layer and the second one at Silver layer.Inside the two layers I’ve created the same table, f.e. Customers, doing some controls at Silver layer.I need to check that the number of Customer rows at Bronze layer is equal to the number of Customer rows at Silver layer.Is it possible to implement a such control in Microsoft Purview for Fabric? Thanks Read More
Persistent volume with Azure Files on AKS
Based on our document, when we need to statically create persistent volume with Azure Files integration, we need to create Kubernetes Secret to store storage account name and access key. And assign the secret into PV yaml file.
However, this mechanism will allow other people that has read permission of AKS cluster to easily read the Kubernetes secret and get the storage account key.
Our customer has concern about this and want to know if there was other mechanism that can prevent this risk (for example , need to fetch account key from key vault first , not directly put storage account key into Kubernetes secret)
Based on our document, when we need to statically create persistent volume with Azure Files integration, we need to create Kubernetes Secret to store storage account name and access key. And assign the secret into PV yaml file.https://learn.microsoft.com/en-us/azure/aks/azure-csi-files-storage-provision#create-a-kubernetes-secretHowever, this mechanism will allow other people that has read permission of AKS cluster to easily read the Kubernetes secret and get the storage account key. Our customer has concern about this and want to know if there was other mechanism that can prevent this risk (for example , need to fetch account key from key vault first , not directly put storage account key into Kubernetes secret) Read More
Azure Functions triggers and bindings for building intelligent apps with Azure OpenAI
Azure Functions triggers and bindings for building intelligent apps with Azure OpenAI
Over the last year, we have seen a large interest from customers to bring intelligence to their existing and new applications based on the innovation that has recently occurred in artificial intelligence and particularly Azure OpenAI.
After working with customers, a few common challenges have shown up when building these intelligent applications.
Developers often feel that they need to become AI engineers to integrate the capabilities into their application.
Most of the samples are in languages like Python and this is often not the expertise of the existing developers or what the organizations’ applications are built with.
Developers also find it difficult to know how successful their integration using OpenAI will be so right sizing their application given the new space can be very challenging.
Lastly, although multiple SDKs exist for working with OpenAI from Microsoft, there are still quite a lot of external tools and SDKs that seem required for sophisticated applications, but clear support is not present.
To help with these challenges, Azure Functions now supports a new extension for OpenAI that contains a set of triggers and bindings that make it easier to build applications that require the following capabilities.
Retrieval Augmented Generation (Bring your own data for semantic search)
Data ingestion with Functions bindings.
Automatic chunking and embeddings creation.
Store embeddings in vector database including AI Search, Cosmos DB for MongoDB, and Azure Data Explorer.
Binding that takes prompts, retrieves documents, sends to OpenAI LLM, and returns to user.
Text completion for content summarization and creation
Input binding that takes prompt or content and returns response from LLM.
Chat assistants
Input binding to chat with LLMs.
Output binding to retrieve chat history from persisted storage.
Skills trigger to extend capabilities of OpenAI LLM through natural language.
These bindings are available in preview for C#, Java, Python, Node, and PowerShell. You can see the documentation for more information.
Use your own data with Azure Open AI
A typical architecture when bringing your own data for semantic search using Retrieval Augmented Generation is shown below.
In this example, customers documents are uploaded by a client and stored for later retrieval. These documents are broken into chunks and sent to Azure OpenAI to create embeddings on the content. The embeddings are then stored in a vector database like AI Search, Cosmos DB for MongoDB or Azure data explorer. These are the current vector stores supported by Azure Functions OpenAI extension, but more will be added in the future.
Once the documents are successfully stored in a vector store, the client can now ask questions of this content to enhance the application with organization data driven by natural language with Azure OpenAI.
This is performed by sending the prompt to the Azure Function binding, where it will be sent to Azure OpenAI to create embeddings, and then these embeddings will be used to do semantic search against the vector store to retrieve relevant content. This content is then sent to Azure OpenAI along with the initial prompt so that an answer can be sent back to the client to enhance the application.
Extending Azure OpenAI chat experience with function calling
A second common scenario we see customers doing is extending the chat experience of working with Azure OpenAI to perform additional actions that the LLM cannot perform. These can be things like sending an email on the findings, looking up support ticket information, perform timecard reporting, or any other action that makes sense in the chat experience that is tailored for the user.
This capability in Azure OpenAI is made available through Function calling https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/function-calling using the Assistant API.
A typical flow for this scenario is described below:
In this example, the client starts a chat session with Azure OpenAI, interactions are automatically saved to a table storage account for history and auditing as required and to resume chats later. If a question comes that OpenAI is not able to answer, the Azure Functions Assistant Trigger capabilities are automatically sent for each interaction so that OpenAI can then direct Azure Functions bindings to call the trigger for the user to perform those custom actions.
This capability is automatically delivered by the Functions triggers and bindings to enable faster development and to give the developer more time to focus on the business integration of the application.
Content summarization and generation
One of the most common use cases for customers using Azure OpenAI is to integrate the ability to create content, improve existing content, or convert content to another form.
In this scenario, the client makes a prompt request with the content and instructions to OpenAI and the Azure Functions text completion binding takes this prompt and sends to OpenAI and returns the response to the client.
Different parameters are supported on the binding to help enhance the response.
As you can see in these three scenarios, the Azure Functions bindings and triggers for Azure OpenAI delivers built in capabilities for developers to integrate intelligence into their new and existing applications. The bindings are available in all supported languages in Azure Functions including .NET, Java, Python, Node, and PowerShell.
Given the serverless nature of Azure Functions, the OpenAI integration will automatically scale based on customer demand so organizations can experiment and know that the underlying platform can meet any usage scenarios. For applications that might need orchestration and workflow capabilities in these intelligent function applications, the native support for durable functions enables developers to take full advantage of the service to deliver the right solution for their users.
Lastly, for customers who need real-time RAG (Retrieval augmented generation) for their organizational data, existing triggers and bindings in the Azure Functions ecosystem enable automatic processing of data in files, databases, messaging services, or any of the systems natively supported for integration https://learn.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings?#supported-bindings
If you would like to get started building intelligence into your applications with Azure Functions and Azure OpenAI, please visit the documentation or you can see an end-to-end demo solution that you can deploy to see all of the capabilities.
The Azure Functions OpenAI triggers and bindings are currently in public preview, and we would love to hear feedback from you on improvements or issues that you experience. You can file them on Issues · Azure/azure-functions-openai-extension (github.com)
Microsoft Tech Community – Latest Blogs –Read More
Enhance productivity with Microsoft Teams certified devices
Microsoft Teams is the hub for teamwork, enabling effortless communication and collaboration. With Microsoft Teams certified devices, you can elevate your meeting and calling experience. These devices are carefully tested and certified to ensure they complement the Teams environment and make every interaction more engaging and productive.
Why use Teams certified devices?
Teams certified devices are specifically designed to enhance your Teams experience. Let’s explore some the benefits below:
Quality and Compatibility: These devices undergo thorough testing and certification to ensure they meet the highest standards of quality and reliability, delivering high-fidelity audio and HD video to ensure clear and effective communication. You can easily get started without any configuration required for these devices to work with Teams.
Firmware Updates: All devices support firmware updates to ensure you have access to the latest features and performance improvements.
Easily access Teams features: Personal peripheral devices are equipped with the Microsoft Teams button, which are designed to streamline your workflow by providing quick access to essential Teams functions. Let’s explore the functionality below:
Bring up the Teams App.
Join a Meeting.
Raise Your Hand within a meeting.
Optimized performance and reliable calling with Teams certified phone devices
Teams certified phone devices deliver reliable and high-quality calling experiences with Teams, making it easy to make and receive calls. We’re committed to supporting reliable experiences on Teams phone devices and have made the following improvements to support uninterrupted experiences for our users. See the full list of updates here.
Simplified user experience
We continue to invest in new capabilities that create easy to use and consistent experiences for Teams phone devices users. The features below are only a few of the investments we’ve made to help users enjoy a unified experience that makes communication and collaboration easier.
Enhanced user Experience: We have made updates to the user interface on the Calls app, and the Dialpad, to make it easier and faster for you to navigate and access the features you need. You can now switch between the Calls app and the home screen with ease and enjoy a Dialpad-only view in both portrait and landscape modes, to avoid typing errors.
New call handling capabilities: We’ve introduced several new capabilities and improvements to help you manage your calls in less clicks. You can now set up call forwarding from the phone home screen, send incoming calls to voicemail, and update your caller ID to make a call on behalf of a call queue phone number.
Performance, reliability, and stability enhancements
We recognize the critical importance of device performance and reliability for our customers using Teams certified phone devices. We are dedicated to delivering calling and meeting experiences that work when you need them and have made several investments to ensure reliable and consistent communications for our customers.
Improved performance and reliability: We’re continuously monitoring reliability incidents and have addressed the top issues based on customer feedback. We have made improvements to the Teams app by organizing and updating its building blocks and resources. These updates have noticeably improved app performance, making the app faster to use and load.
OS upgrade: In collaboration with our OEM partners, we are advancing support for Android OS 12 on phone devices, to ensure users have the latest security updates available.
While Microsoft Teams phone devices offer the most immersive Teams experience, we understand that numerous customers have prior investments in SIP devices. SIP Gateway allows these customers to utilize their existing telephony equipment as they transition to Teams Phone, ensuring that the fundamental calling features of Teams are accessible. Learn more about SIP Gateway and see the full list of supported SIP devices here.
Learn more
Explore the comprehensive portfolio of Teams certified devices here. Easily find and buy certified Teams devices through the Teams admin center or within the new device store in the Teams app.
Stay up to date on the latest feature announcements for Teams certified peripherals and phone devices.
Microsoft Tech Community – Latest Blogs –Read More
Announcing GA of Advance Notifications for Azure SQL Managed Instance
What are advance notifications?
Why should I configure advance notifications?
Affected region
Affected service
List of impacted resources
Status of maintenance event
How do advance notifications work?
How do you set up advance notifications?
Conclusion
Microsoft Tech Community – Latest Blogs –Read More
Is there some way to resolve a DLP false positive on a Sharepoint file?
We received an email from SharePoint indicating a file that’s shared outside our organization has a credit card number on it. The CAD drawing has been fully inspected and confirmed to not have a credit card number in it.
Our DLP policy is otherwise sound. Is there some way to just update this one file to confirm it’s ok?
When selecting REPORT AN ISSUE, this doesn’t go to anyone in our organization.
We received an email from SharePoint indicating a file that’s shared outside our organization has a credit card number on it. The CAD drawing has been fully inspected and confirmed to not have a credit card number in it. Our DLP policy is otherwise sound. Is there some way to just update this one file to confirm it’s ok? When selecting REPORT AN ISSUE, this doesn’t go to anyone in our organization. Read More
Clicking on Manage on a group Member’s Properties page sends me to a completely different device
Recently I sent a wipe to a computer (Device A). Groups – Group A – Members – Device A – Properties – Manage – Wipe. But, when I navigated to the Manage tab, it sent me to a completely different device (Device X). Device X is not in Group A, or any other group. When I sent a wipe, it sent it to Device X, not Device A, and it is currently still pending.
We found out after that this glitch starting happening with every member of every group in our system. Clicking Manage on any device in any group sent us to the Manage page of Device X. If we search for devices in Devices instead of Groups, this glitch does not happen.
What is going on? Is there a possibility that all of our devices could be wiped because of this glitch?
Recently I sent a wipe to a computer (Device A). Groups – Group A – Members – Device A – Properties – Manage – Wipe. But, when I navigated to the Manage tab, it sent me to a completely different device (Device X). Device X is not in Group A, or any other group. When I sent a wipe, it sent it to Device X, not Device A, and it is currently still pending.We found out after that this glitch starting happening with every member of every group in our system. Clicking Manage on any device in any group sent us to the Manage page of Device X. If we search for devices in Devices instead of Groups, this glitch does not happen.What is going on? Is there a possibility that all of our devices could be wiped because of this glitch? Read More
Parameterized function in cross workspace queries
Hi,
I’m looking to get some input on a query I’m working on.
The thought is to create a query for each customer in our Lighthouse tenant, then be able to query a function named for the customer, so for example,
CustomerA(“SigninLogs”)
| where Identity contains “someperson”
However, when calling the function above, I’m getting the following error.
Is there some limitation with the workspace command or where am I doing wrong?
Hi, I’m looking to get some input on a query I’m working on. The thought is to create a query for each customer in our Lighthouse tenant, then be able to query a function named for the customer, so for example,CustomerA(“SigninLogs”)| where Identity contains “someperson” However, when calling the function above, I’m getting the following error. Is there some limitation with the workspace command or where am I doing wrong? Read More
Attendance tab not showing for co-organisers for Webinars
When setting up some recent webinars that are open to the public, we have added a number of co-organisers across our organisation to allow them to check who’s registered and keep tabs on registration numbers for each webinar.
This used to be visible in Teams on the webinar menu bar for easy access to everyone. But despite checking the settings in meeting options and ensuring that ‘Allow attendance report’ is selected as ‘Yes,’ only the main webinar organiser can see this attendance report tab?
Any suggestions?
When setting up some recent webinars that are open to the public, we have added a number of co-organisers across our organisation to allow them to check who’s registered and keep tabs on registration numbers for each webinar. This used to be visible in Teams on the webinar menu bar for easy access to everyone. But despite checking the settings in meeting options and ensuring that ‘Allow attendance report’ is selected as ‘Yes,’ only the main webinar organiser can see this attendance report tab? Any suggestions? Read More
Problems with Group Header Formatting in Sharepoint List
I’m having an couple of issues with formatting the grouped headers of a sharepoint list where the JSON formatting seems to be having an odd effect. The first thing, is when I apply any JSON formatting at all, I lose the ability to click on the headers to filter by that group. This is despite having the default click custom row action included. The second issue is when I change the “hideSelection” field to true, the group heading jumps from it’s normal position to half way down the width of the list. If tried setting different padding and position fields, but it always applies from this new position in the middle of the screen. Any advise would be appreciated!
{
“$schema”: “https://developer.microsoft.com/json-schemas/sp/v2/row-formatting.schema.json”,
“hideSelection”: true,
“groupProps”: {
“headerFormatter”: {
“elmType”: “div”,
“style”: {
“padding-left”: “12px”,
“font-size”: “16px”,
“font-weight”: “400”,
“cursor”: “pointer”,
“outline”: “0px”,
“white-space”: “nowrap”,
“text-overflow”: “ellipsis”
},
“customRowAction”: {
“action”: “defaultClick”
},
“children”: [
{
“elmType”: “div”,
“children”: [
{
“elmType”: “span”,
“style”: {
“padding”: “5px 5px 5px 5px”
},
“txtContent”: “@group.fieldData.displayValue”
}
]
},
{
“elmType”: “div”,
“children”: [
{
“elmType”: “div”,
“style”: {
“display”: “flex”,
“flex-direction”: “row”,
“justify-content”: “center”
},
“children”: [
{
“elmType”: “div”,
“txtContent”: “=’ (‘ + @group.count + ‘)'”
}
]
}
]
}
]
}
}
}
I’m having an couple of issues with formatting the grouped headers of a sharepoint list where the JSON formatting seems to be having an odd effect. The first thing, is when I apply any JSON formatting at all, I lose the ability to click on the headers to filter by that group. This is despite having the default click custom row action included. The second issue is when I change the “hideSelection” field to true, the group heading jumps from it’s normal position to half way down the width of the list. If tried setting different padding and position fields, but it always applies from this new position in the middle of the screen. Any advise would be appreciated! {
“$schema”: “https://developer.microsoft.com/json-schemas/sp/v2/row-formatting.schema.json”,
“hideSelection”: true,
“groupProps”: {
“headerFormatter”: {
“elmType”: “div”,
“style”: {
“padding-left”: “12px”,
“font-size”: “16px”,
“font-weight”: “400”,
“cursor”: “pointer”,
“outline”: “0px”,
“white-space”: “nowrap”,
“text-overflow”: “ellipsis”
},
“customRowAction”: {
“action”: “defaultClick”
},
“children”: [
{
“elmType”: “div”,
“children”: [
{
“elmType”: “span”,
“style”: {
“padding”: “5px 5px 5px 5px”
},
“txtContent”: “@group.fieldData.displayValue”
}
]
},
{
“elmType”: “div”,
“children”: [
{
“elmType”: “div”,
“style”: {
“display”: “flex”,
“flex-direction”: “row”,
“justify-content”: “center”
},
“children”: [
{
“elmType”: “div”,
“txtContent”: “=’ (‘ + @group.count + ‘)'”
}
]
}
]
}
]
}
}
} Read More
Intune Management Extension not installed on 200+ PC’s
Hi all
We recently moved from LOB apps to W32 to prepare for our upcoming autopilot rollout
While pushing apps out via W32, we noticed that the apps would install on about half of our PC’s but not even report on the other half.
Via some digging, we found that the IME failed to install on these PC’s
Does anyone have a way to install this on 200+ PC’s correctly? The majority of PC’s are hybrid joined and there is no rhyme or reason as to why this is happening
On the PC’s there is no IME records in registry or in file explorer, its as if the PC never had the extension in the first place
Any help is greatly appreciated
Thanks!
Hi all We recently moved from LOB apps to W32 to prepare for our upcoming autopilot rollout While pushing apps out via W32, we noticed that the apps would install on about half of our PC’s but not even report on the other half. Via some digging, we found that the IME failed to install on these PC’s Does anyone have a way to install this on 200+ PC’s correctly? The majority of PC’s are hybrid joined and there is no rhyme or reason as to why this is happening On the PC’s there is no IME records in registry or in file explorer, its as if the PC never had the extension in the first place Any help is greatly appreciated Thanks! Read More
New to excel if formula question
It’s been a few years since I last used formulas in excel and I have a spreadsheet that I want it to automatically output a name if it reads a certain data set. Like for my spreadsheet, I want to automatically assign an employees name based off of what state the property is located in. Any help would be appreciated Thank you.
It’s been a few years since I last used formulas in excel and I have a spreadsheet that I want it to automatically output a name if it reads a certain data set. Like for my spreadsheet, I want to automatically assign an employees name based off of what state the property is located in. Any help would be appreciated Thank you. Read More
Facility Check Time, Shift Time Check Calculated Column
I have a facility check SP List that users, through Power apps log safety checks. They are to complete these checks on each shift and within 1 hour of the shift starting.
I need a calculated column that can look at the the Shift Value and the Time it was logged and change a value in the Calculated column to Say Pass / Fail.
So as an example if the AM shift starts at 06:55:00 then the target time for the check is 07:55:00.
IF (AM – Shift Time>07:55:00,”Fail”, “Pass)
Can this be converted to a calculated column, as well as looking up the multiple shift values?
The last column in my excel example is the time over the target time.
I have a facility check SP List that users, through Power apps log safety checks. They are to complete these checks on each shift and within 1 hour of the shift starting. I need a calculated column that can look at the the Shift Value and the Time it was logged and change a value in the Calculated column to Say Pass / Fail. So as an example if the AM shift starts at 06:55:00 then the target time for the check is 07:55:00. IF (AM – Shift Time>07:55:00,”Fail”, “Pass) Can this be converted to a calculated column, as well as looking up the multiple shift values? The last column in my excel example is the time over the target time. Read More
Is it possible for the dotnet command to not publish some files?
I’ve received an unusual request from some users of an ASP.NET Core app. I’m using the dotnet command to clean and publish the solution, to a server in our network, using a GitHub self-hosted runner on another server. They don’t want the dotnet command to publish the “appsettings.json” and “appsettings.Developer.json” files. Is there a way of preventing dotnet from publishing some files?
Here’s the code snippet I’m using from the YAML file:
– name: Clean build
run: dotnet clean $env:Solution_Name
– name: Publish app
run: dotnet publish -c Release $env:Solution_Name /p:PublishProfile=VaccineRegDevProfile
I’ve received an unusual request from some users of an ASP.NET Core app. I’m using the dotnet command to clean and publish the solution, to a server in our network, using a GitHub self-hosted runner on another server. They don’t want the dotnet command to publish the “appsettings.json” and “appsettings.Developer.json” files. Is there a way of preventing dotnet from publishing some files? Here’s the code snippet I’m using from the YAML file: – name: Clean build
run: dotnet clean $env:Solution_Name
– name: Publish app
run: dotnet publish -c Release $env:Solution_Name /p:PublishProfile=VaccineRegDevProfile Read More
How to verify column contains only digits and space
Hello Folks,
is there an easy way to verify a SP column contains only digits and spaces ?
I want to use “Replace” function to change ” ” (spaces) into “” (empty string) and then verify with “isnumber” but find/replace works only on the first founded space.
Any suggestions will be welcome
Hello Folks, is there an easy way to verify a SP column contains only digits and spaces ?I want to use “Replace” function to change ” ” (spaces) into “” (empty string) and then verify with “isnumber” but find/replace works only on the first founded space.Any suggestions will be welcome Read More
écrire avec le mail d’un groupe
Je veux envoyer un mail avec le mail d’un groupe. Comment faire ?
Je veux envoyer un mail avec le mail d’un groupe. Comment faire ? Read More
Request for Email Activity Report with Internal/External Breakdown
Hi everyone,
Is it possible to generate a report that shows the number of emails sent and received by each user, with a breakdown of internal and external emails?
I understand that we can find some basic metrics in the admin center under Reports > Usage > Exchange > Email activity. However, this does not separate the count of internal and external emails.
Does anyone have any suggestions or know of a way to achieve this?
Thank you!
Hi everyone, Is it possible to generate a report that shows the number of emails sent and received by each user, with a breakdown of internal and external emails? I understand that we can find some basic metrics in the admin center under Reports > Usage > Exchange > Email activity. However, this does not separate the count of internal and external emails.Does anyone have any suggestions or know of a way to achieve this?Thank you! Read More
Sum of calculated Currency column without Power Automate
I have a Microsoft List for our projects with a calculated currency column calculating estimated fee income based on a percentage (from a separate column) of the project value column.
I want to have the Estimated fees column display a sum at the bottom, just like a numeric column can.
I understand that this can’t currently be done with the currency column, but there are apparently workarounds with Power Automate.
I don’t want to disappear down this rabbit hole/time vacuum at least for now, so I’m wondering if there is a simple workaround using a numeric column, with JSON custom formatting to display currency symbols and comma separation to turn number like this 11000 into this £11,000.00.
Is this too simplistic?
I have a Microsoft List for our projects with a calculated currency column calculating estimated fee income based on a percentage (from a separate column) of the project value column. I want to have the Estimated fees column display a sum at the bottom, just like a numeric column can. I understand that this can’t currently be done with the currency column, but there are apparently workarounds with Power Automate. I don’t want to disappear down this rabbit hole/time vacuum at least for now, so I’m wondering if there is a simple workaround using a numeric column, with JSON custom formatting to display currency symbols and comma separation to turn number like this 11000 into this £11,000.00. Is this too simplistic? Read More
Purview DLP policy not applying to meeting requests sent from MS Teams
We have a Purview DLP policy that was originally applied to exchange location and applied to mail enabled security group. The users in these groups get the policy applied successfully and MS Teams meeting invite without classification label gets blocked.
Then we added few more M365 groups to this DLP policy. But the users in these M365 groups are not getting the policy and the MS Teams meeting invite without classification label can still be sent successfully by users in these M365 groups.
I looked at the exchange trace log for invite sent by one of these users and see the invite does not match any DLP rule and is thus sent. For a meeting invite from user in the mail enabled group the rule matches and it is blocked.
Are M365 groups not supported for this type of DLP policy?
What other logs or steps I can take to resolve this?
We have a Purview DLP policy that was originally applied to exchange location and applied to mail enabled security group. The users in these groups get the policy applied successfully and MS Teams meeting invite without classification label gets blocked.Then we added few more M365 groups to this DLP policy. But the users in these M365 groups are not getting the policy and the MS Teams meeting invite without classification label can still be sent successfully by users in these M365 groups.I looked at the exchange trace log for invite sent by one of these users and see the invite does not match any DLP rule and is thus sent. For a meeting invite from user in the mail enabled group the rule matches and it is blocked.Are M365 groups not supported for this type of DLP policy?What other logs or steps I can take to resolve this? Read More