General

Automatically Apply Sensitive Labels: 3 Options

by dougsbaker
Microsoft Information Protection Sensitivity Labels are a great way to protect your Unstructured Data. However, it requires end users to label the data for the protection to work. Let's fix that and automate the labeling process. In this video, I give you 3 options for Automatically Applying Sensitivity labels. Reference Docs https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide https://dougsbaker.com/2021/11/23/label-all-files-in-an-spo-site/

MIP – Sensitivity Label Overview

by dougsbaker
Sensitivity labels from Microsoft Purview Information Protection is a great way for you to begin classifying and protecting your data. In this video, I give you an overview of the functionality and a demo of the end-user experience. Tech Net Resources: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels

DLP Next Steps – User Education Mode

by dougsbaker
So you have analyzed the results of your monitor policy and are ready to move forward. In this video, I discuss setting up notifications to help alert your users they are about to share sensitive info. Microsoft Documentation Rescources. Custom Notifications: https://docs.microsoft.com/en-us/microsoft-365/compliance/use-notifications-and-policy-tips?view=o365-worldwide#custom-email-notification If your policy Tips are not showing there can be several Gotchas, see ... Read More

Exploring Sensitive Info Types

by dougsbaker
In this video, we discuss Sensitive Informations Types (SIT) and how they are a fundamental cornerstone of building out DLP policies. Links Sensitive Info Type Definitions https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitive-information-type-entity-definitions?view=o365-worldwid

Design a Custom Sensitive Info Type (SIT) in Microsoft Purview

by dougsbaker
What do you do when none of the built-in MSFT Sensitive Info Types match your data? In this video, I show you where I start when building custom Sensitive Info Types(SIT) for Microsoft Purview Data Loss Prevention. Links: Testing Site https://regex101.com/ MSFT Documentation https://docs.microsoft.com/en-us/microsoft-365/compliance/create-a-custom-sensitive-information-type?view=o365-worldwide

Deploy MIP Sensitivity Labels

by dougsbaker
Let's go through the process of deploying Sensitivity Labels in our org. In this video, I will go from top to bottom to help you deploy a standard label schema to a test set of users. TechNet Articles: Deploy Labels https://docs.microsoft.com/en-us/microsoft-365/compliance/create-sensitivity-labels Enable Labels for SPO & OneDrive https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepoint-onedrive-files Enable Co-Authoring https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-coauthoring

Label all files in an SPO site

by dougsbaker
Oftentimes when deploying MIP Sensitive Labels, I run into use cases where customers want to auto label all files in an SPO site. This is usually for a site that will always contain proprietary data, such as a Project Site, or Departmental Site. When this comes up customers are typically looking at the Container Level ... Read More

Microsoft Chrome Extensions

by dougsbaker
Do you still have users that love their Chrome? Haven’t convinced the org to switch to the new Edge Chromium? Want to make sure the user/security experience with Chrome matches the new features built into edge? Well if you do you are going to need to deploy some Microsoft Chrome Extensions. To help with that ... Read More

Powershell admin tool launcher

by dougsbaker
I Often find my self needing to open tools such as AD or DNS as a different user account. This is because as a security best practices I usually recommend organizations run dual account security. Where an IT team member uses a separate account for admin activity vs their day to day account that has ... Read More

Deploying Password Policy’s

by dougsbaker
When its time to setup an AD password policy for your company you are going to google the process and you are going to find 1 Million ways to enforce passwords. Unfortunately most of the ways that are listed there are really geared toward older options Pre 2008 Active Directory. Most involve trying to use ... Read More