Compliance licenses at tenant level
Hi, We are a small organization of about 200 employees, and we have following requirements. DLP policies configuration at Exchange, OneDrive, SharePoint BYOD security Users should not be able to send files outside the org And so on as we evaluate We already have M365 Business Premium. However, after researching we figured out that M365 Business premium will alone not solve our requirements. May be compliance license will. We want to apply security policies at tenant level in our organization but definitely do not want every user to get licenses as this will be expensive for us and there is no requirement at all for our users. The question is, Is there a way to solve the above scenario?
Microsoft Purview best practices
I am wondering what the best way to accomplish this would be. We are working at stepping down our email retention periods from 10 years to 5 years. We currently have a 10-years policy that uses a dynamic 365 group for assigned users. The group runs a query that finds anyone in our organization with a Business Premium license. That's working great. Our next step is to go to a 5-year policy. But we have several users that need to be placed in a 7-year policy. Microsoft has removed the option to use both the include and exclude settings in a retention policy. My question is, Are we over thinking the way to do this? Or should we just be doing this: Create one 5-year policy that is set to the entire organization. Then create a 365 dynamic group with the users who need the 7-year policy assigned to it. Then create a 7-year policy and assign the 7-year policy group to it. Then also place that group in the Exclude listing of the 5-year policy. Will that work and is it best practice.? I can't afford to make a mistake on this and I can't remember if I created the dynamic group with the query for licensed users for a reason or if I was just being too detailed.
Hidden Group and Hidden Group Membership
Hi everyone! I have come across a requirement where the client would like to use an excel spreadsheet, a service account and application registration to manage group membership for a confidential group. They would like to create a group from which the members cannot leave, see other team members and cannot see the group itself. Now, I have the concept of the flow with me but for the life of me, I cannot get around to finding/configuring a group that meets the requirement. Have you guys come across this sort of scenario? Group Configuration: Users should not be able to view the group Users should not be able to view members of the group Users should not be able to leave the group Thanks in advance.Practical Graph: Apply Retention Labels to Unlabeled SharePoint Files
A previous article described a script to find SharePoint Online files that didn't have retention labels. This article picks up the thread and shows how to use the data generated by the previous script to apply retention labels to the unlabeled files using cmdlets from the Microsoft Graph PowerShell SDK. Some issues are met along the way, but the script works and does the job, which is all that counts at the end of the day. https://practical365.com/apply-retention-labels-powershell/Discover Where Files without Retention Labels Exist in SharePoint and OneDrive
Purview Data Lifecycle management includes many ways to apply retention labels to SharePoint Online files, some of which require E5 licenses. Tools are available to show you what files have retention labels, but finding unlabeled SharePoint files is difficult because no out-of-the-box methods are available. Here we show how to use a content search to find unlabeled SharePoint files, and how to adjust the search results to have usable data for further processing. https://practical365.com/unlabeled-sharepoint-files/
How do I apply auto labelling policy based on a folder name in M365 Purview?
Condition --> When a folder name is "Finance", then auto apply the label "Indefinite" to the folder (and it's items inside it). So I Created a "auto apply label" and selected this retention label "indefinite" to it. I am having trouble writing the CONDITION which actually looks for folder named "Finance". Can you help me with that? I searched up various resources but can't find a single video or resource which explains how to write the above condition to apply a label when a folder name is matching a name mentiond in a query. Here is the auto label policy I am trying out This is what some of the resources in web suggested, but It doesn't work The above policy si active, but I can't see the auto label applied to the folder, or any document inside the Finance folder (See below). Is there a issue with the syntax?How do I ensure a document/folder is not automatically deleted after retention label period lapses?
Hello All, I have retention label created in M365 compliance centre, which appears as document metadata (As expected) in the document library as shown below One of the objectives is that the below retention label needs to appear at a folder level (one level up), rather than at document level. The desired outcome is that once this 3 years has lapsed, the folder should NOT be automatically deleted. It should be manually actioned by user (and the documents underneath the folder) When I created this retention label, here are the sequence of screens I went through ( I did not see the option that says "do nothing") when retention period lapses here is the retention period setting screen Here is the screenshot below that I have question about. Where is the option that says "dont do anything" after retention period lapses? It seems like I dont have that option here (Is it a setting that I need to enable somewhere?) . My goal is to have control over manually deleting documents (while respecting retention policies) without automatic deletion occuring. So my 2 questions here in this post are : 1) How do I apply this retention label to a folder (instead of individual document level)? 2) In the last screenshot above, how do I enable the option to "not do anything" (After retention period lapses)?
Issue with retention policy with adaptive scope
Dear community, We created an adaptive scope and a retention policy about two weeks ago. If I check the scope details on the Purview portal, the adaptive scope shows 9602 users, but the policy shows only ~9150 users. I tried to investigate the issue, but I haven't found an error message or a list of users missing from the policy. I must find a way to list out the users who are not covered by the policy. What I have done in a nutshell is: - Get-ComplianceRetentionPolicy does not see this policy. We have a few other policies with static scope, and they appear on the output, but the one we want to check is not. - I collected all the mailboxes and checked the InPlaceHolds, but there is no such policy either. This is weird since we should have 9150 users covered by this policy. - I checked a user who has this policy with the "Policy lookup" feature on the Purview portal, and it showed that the user is covered by the policy. I googled, Copiloted, and ChatGPTd my question, but I still have no clue what to do. The main question is: How can I query a list of users missing from a retention policy with adaptive scope? Thank you for your help in advance!Retention policy - keep deleted files for a year
Hello everyone, Have a question regarding retention policy (or labels if it might help in this situation). I would like to implement a policy which keeps files which were deleted for a year after the file is deleted (in this case, for SharePoint Online). From what I saw, the only triggers for the policies are when items are created and when files are modified, but not when a file is deleted. Also, if I am understanding it correctly, you cannot put labels on the files which are in the recycle bin. Is there any solution which could help me in this case? This is the policy that I would like to implement for all of my SharePoint sites, which I have a lot of. Kind regards.
Office 356 support
We initiated a case with the Office 365 team for creating a retention policy, but unfortunately, it resulted in deleting emails from users' inboxes. Despite the critical nature of the issue, our attempts to escalate it through a support ticket have been met with a lack of seriousness and responsiveness from the support team. Despite multiple requests, there has been no managerial intervention, no change in severity level, and the engineer assigned to the case has been unable to access the necessary logs to diagnose the problem. It has now been three days since emails started being deleted from users' inboxes, and despite our efforts to explain the urgency of the situation, it is not being addressed appropriately. Considering that contacting the support number has proven futile as they do not answer calls, our next option may involve reaching out to higher-level management within the support organization or exploring alternative support channels.
