DLP policy reference

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

• Non-Mail
• Non-Microsoft

Requirements, exceptions and scope

• Recommended readingRecommendation12 passages
• Defaul policy for devicesException2 conditions1 passage
• Policy scopingException2 conditions2 passages
• Support for adding SharePoint sites to Administrative UnitsExceptionScope4 conditions2 passages
• Administrative unit restricted policiesRequirementException1 condition1 passage
• LocationsException10 conditions9 passages
  Non-Microsoft
• Exchange location scopingException1 condition1 passage
  Non-Mail
• Exchange location scope calculationScope2 conditions2 passages
• OneDrive location scopingRequirementException11 conditions9 passages
• Device scopingExceptionScope7 conditions4 passages
• Location support for how content can be definedException3 conditions1 passage
• How DLP classification worksException2 conditions1 passage
• Hosted service locationsException2 conditions2 passages
• Run the policy in simulaiton mode changes the action that's applied at runtimeException3 conditions1 passage
• ConditionsRecommendation2 conditions1 passage
• Content containsException2 conditions2 passages
• Condition contextException1 condition1 passage
• Conditions Exchange supportsScope1 passage
• Conditions managed cloud apps supportException1 condition1 passage
• Conditions unmanaged cloud apps supportRequirement1 passage
• Conditions supported for EndpointsRequirementExceptionScopeRecommendation6 conditions9 passages
• Operating system requirements for five conditionsRequirement1 passage
• Condition groupsRequirementExceptionRecommendation2 conditions3 passages
• ActionsRequirementException5 conditions5 passages
• Supported actions: ExchangeExceptionScope1 condition2 passages
• Supported actions: SharePointException1 condition1 passage
• Supported actions: OneDriveException1 condition1 passage
• Supported actions: DevicesExceptionScope5 conditions5 passages
• Supported actions: Managed cloud appsException1 condition1 passage
• Supported actions: Unmanaged cloud appsException1 condition1 passage
• Restrict access or encrypt content in Microsoft 365 locationsException2 conditions1 passage
• Service domain and browser activitiesException1 condition1 passage
• Paste to Browser limitationsException2 conditions2 passages
• Restricted app activitiesException2 conditions1 passage
• File activities for apps in restricted app groupsRequirementException4 conditions3 passages
• Fabric and Power BI actionsException1 condition1 passage
• DLP platform limitations for actionsExceptionScopeRecommendation2 conditions4 passages
• User notifications and policy tipsException3 conditions2 passages
• Email notification batchingException1 condition3 passages
• Policy tips and user notifications configuration optionsRequirementExceptionScope2 conditions4 passages
• Block users in ExchangeException1 condition1 passage
• Blocking and notifications in SharePoint in Microsoft 365 and OneDriveException9 conditions2 passages
• Learn more URLRequirementException1 condition2 passages
• User overridesException1 condition1 passage
• User override behaviorRequirementException1 condition2 passages
• Incident reportsRequirement1 passage
• Alert typesException2 conditions1 passage
• Other alert optionsScope1 passage
• Evidence collection for file activities on devicesRequirementException2 conditions1 passage
• Additional optionsException2 conditions1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.