{"id":5359,"date":"2025-07-28T18:37:47","date_gmt":"2025-07-28T17:37:47","guid":{"rendered":"https:\/\/mortenknudsen.net\/?p=5359"},"modified":"2025-08-01T09:30:25","modified_gmt":"2025-08-01T08:30:25","slug":"how-to-block-upload-but-allowing-download-via-wetransfer-dropbox-google-drive-using-microsoft-purview-dlp","status":"publish","type":"post","link":"https:\/\/mortenknudsen.net\/?p=5359","title":{"rendered":"How to Block Upload to WeTransfer, DropBox &amp; Google Drive (but Allowing Download) &#8211; using Microsoft Purview Data Loss Prevention (DLP)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">This blog was created in response to <a href=\"https:\/\/wetransfer.com\/blog\/story\/wetransfer-terms-of-service-changes-july-2025\" data-type=\"link\" data-id=\"https:\/\/wetransfer.com\/blog\/story\/wetransfer-terms-of-service-changes-july-2025\">recent policy changes<\/a> related to the WeTransfer cloud storage service. These changes raised <span style=\"text-decoration: underline;\">general concerns that company data might be used to train AI models if sent through services like WeTransfer, Dropbox, or Google Drive<\/span>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>DISCLAIMER\n<strong>WeTransfer confirms that your data is NOT used to train AI<\/strong> - <a href=\"https:\/\/wetransfer.com\/blog\/story\/wetransfer-terms-of-service-changes-july-2025\" data-type=\"link\" data-id=\"https:\/\/wetransfer.com\/blog\/story\/wetransfer-terms-of-service-changes-july-2025\">Link to full article<\/a>\n<em>Your content is always your content. This is specified in section 6.2. Ownership of Content of our Terms of Service, which says: \u201cWe do not claim any ownership rights to the Content. You or your licensors own and retain all right, title, and interest, including all intellectual property rights, in and to the Content.\n<\/em>\n<em>We don\u2019t use machine learning or any form of AI to process content shared via WeTransfer.<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Being a Microsoft person, I advocate for using Sharepoint (preferred) and maybe OneDrive to exchange data &#8211; but sometimes partners are using other services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Goal: Block Upload &#8211; but Allow Download<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Multiple customers have reached out asking for my help in ensuring that <strong>upload to these 3rd party services was blocked<\/strong> &#8211; while <strong>allowing download to happen<\/strong>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">High-level steps to complete the configuration<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"#step1\" data-type=\"internal\" data-id=\"#step1\">Step 1: Client &#8211; Purview Extension for Google Chrome &amp; Firefox (Otional)<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"#step2\" data-type=\"internal\" data-id=\"#step2\">Step 2: Purview settings (DLP settings)<\/a><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"#step2a\" data-type=\"internal\" data-id=\"#step2a\">Step 2A: Block Sync-tools like Dropbox.exe and GoogleSyncFS.exe (&#8216;Restricted apps and app groups&#8217;)<\/a><\/li>\n\n\n\n<li><a href=\"#step2b\" data-type=\"internal\" data-id=\"#step2b\">Step 2B: Block unallowed browsers to force browser communication to happen in allowed browsers (Edge or supported browsers with Purview extension like Chrome &amp; Firefox)<\/a><\/li>\n\n\n\n<li><a href=\"#step2c\" data-type=\"internal\" data-id=\"#step2c\">Step 2C: Block domains for Dropbox, WeTransfer, Google Drive<\/a><\/li>\n\n\n\n<li><a href=\"#step2d\" data-type=\"internal\" data-id=\"#step2d\">Step 2D: Block Sensitive service domains (group) for Dropbox, WeTransfer, Google Drive<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"#step3\" data-type=\"internal\" data-id=\"#step3\">Step 3: Deploy Purview DLP Policy<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"#step4\" data-type=\"internal\" data-id=\"#step4\">Step 4: Wait for 24 hours<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"#step5\" data-type=\"internal\" data-id=\"#step5\">Step 5: Verify Upload is Blocked, while Download is Allowed<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"#step6\" data-type=\"internal\" data-id=\"#step6\">Step 6: Ensure additional storage providers are restricted in Outlook on the web<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step1\">Step 1: Client &#8211; Purview Extension for Google Chrome &amp; Firefox (Optional)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Edge is the recommended browser as it supports Microsoft Purview by default.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are using Google Chrome and\/or Firefox, you are recommended to deploy the Purview extension. This way, you get more of less the same capabilities as in Microsoft Edge.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">See Microsoft guides on how to deploy using your preferred method (Intune, GPO)<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/dlp-chrome-get-started\" data-type=\"link\" data-id=\"https:\/\/learn.microsoft.com\/en-us\/purview\/dlp-chrome-get-started\">Get started with the Microsoft Purview extension for Chrome<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/dlp-firefox-extension-get-started\">Get started with the Microsoft Purview extension for Firefox<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step2\">Step 2: Purview settings (DLP settings)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Initially we need to configure some generic settings for DLP:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Step 2A: Block Sync-tools like Dropbox.exe and GoogleSyncFS.exe (&#8216;Restricted apps and app groups&#8217;)<\/li>\n\n\n\n<li>Step 2B: Block unallowed browsers to force browser communication to happen in allowed browsers (Edge or supported browsers with Purview extension like Chrome &amp; Firefox)<\/li>\n\n\n\n<li>Step 2C: Block domains for Dropbox, WeTransfer, Google Drive<\/li>\n\n\n\n<li>Step 2D: Block Sensitive service domains (group) for Dropbox, WeTransfer, Google Drive<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Below you will find guide on how to configure this.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"642\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1024x642.png\" alt=\"\" class=\"wp-image-5360\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1024x642.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-300x188.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-768x481.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1536x962.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image.png 1947w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"670\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1-1024x670.png\" alt=\"\" class=\"wp-image-5361\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1-1024x670.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1-300x196.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1-768x502.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-1.png 1107w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step2a\">Step 2A: Restricted apps and app groups<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Goal for this step is to <strong>Block Sync-tools like Dropbox.exe and GoogleSyncFS.exe using Restricted apps and app groups&#8217;<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"961\" height=\"1006\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-2.png\" alt=\"\" class=\"wp-image-5362\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-2.png 961w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-2-287x300.png 287w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-2-768x804.png 768w\" sizes=\"auto, (max-width: 961px) 100vw, 961px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"337\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-3-1024x337.png\" alt=\"\" class=\"wp-image-5363\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-3-1024x337.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-3-300x99.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-3-768x253.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-3.png 1505w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step2b\">Step 2B: <strong>Browser and domain restrictions to sensitive data<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Goal for this step is to <strong>Block unallowed browsers to force browser communication to happen in allowed browsers<\/strong> (Edge or supported browsers with Purview extension like Chrome &amp; Firefox)<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"193\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-4-1024x193.png\" alt=\"\" class=\"wp-image-5364\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-4-1024x193.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-4-300x57.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-4-768x145.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-4.png 1070w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Unallowed browsers<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"757\" height=\"887\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-5.png\" alt=\"\" class=\"wp-image-5365\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-5.png 757w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-5-256x300.png 256w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step2c\">Step 2C: Block Service Domains<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Goal for this step is to <strong>Block domains for Dropbox, WeTransfer, Google Drive<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"603\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-6-1024x603.png\" alt=\"\" class=\"wp-image-5366\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-6-1024x603.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-6-300x177.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-6-768x452.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-6.png 1095w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to find the relevant domains to block ?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sample: Google Drive<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"481\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-7-1024x481.png\" alt=\"\" class=\"wp-image-5367\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-7-1024x481.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-7-300x141.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-7-768x361.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-7-1536x721.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-7-2048x962.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Google Drive domains to block per 28th July 2025<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"459\" height=\"377\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-8.png\" alt=\"\" class=\"wp-image-5368\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-8.png 459w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-8-300x246.png 300w\" sizes=\"auto, (max-width: 459px) 100vw, 459px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Microsoft DLP limitations &#8211; only domain; not folder support<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Currently, Microsoft DLP doesn&#8217;t support folder blocking, only domain blocking.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Therefore these URLs cannot be blocked<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">*.google.com\/drive<br>*.workspace.google.com\/drive<br>*.workspace.google.com\/products\/drive<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">DropBox to block per 28th July 2025<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"474\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-9-1024x474.png\" alt=\"\" class=\"wp-image-5369\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-9-1024x474.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-9-300x139.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-9-768x355.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-9.png 1145w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">WeTransfer domains to block per 28th July 2025<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"492\" height=\"438\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-10.png\" alt=\"\" class=\"wp-image-5370\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-10.png 492w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-10-300x267.png 300w\" sizes=\"auto, (max-width: 492px) 100vw, 492px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Complete list of domains per 28th July 2025<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>WeTransfer:\n*.nolan.wetransfer.net\n*.storm-eu-west-1.wetransfer.net\n*.previews-te.wetransfer.net\n*.backgrounds.wetransfer.net\n*.creatives.wetransfer.net\n*.wetransfer.com\n*.we.tl\n\nGoogle Drive:\n*.googledrive.com\n*.drive.google.com\n*.workspace.google.com\n*.drive.usercontent.google.com\n\nDropBox:\n*.dropbox.com\n*.dropboxapi.com\n*.dropboxbusiness.com\n*.dropboxdocs.com\n*.dropboxforums.com\n*.dropboxforum.com\n*.dropboxinsiders.com\n*.dropboxmail.com\n*.dropboxpartners.com\n*.dropbox.zendesk.com\n*.getdropbox.com\n*.dropboxbusinessblog.nl\n*.dropboxbusinessblog.fr\n*.dropbox.co.uk\n*.dropboxbusinessblog.de\n*.dropbox.jp\n*.dropbox.com.au\n*.instructorledlearning.dropboxbusiness.com\n*.paper.dropbox.com\n*.dropbox.tech<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step2d\">Step 2D: Sensitive service domains (group)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Goal for this step is to <strong>Block Sensitive service domains using sensitive service domain group.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Create a new sensitive service domain group (like &#8216;Unapproved cloud storage services&#8217;) &#8211; and add the domains above. You can also import CSV-file using Import-button. <a href=\"https:\/\/raw.githubusercontent.com\/KnudsenMorten\/Purview-Goodies\/refs\/heads\/main\/Block%20Upload%20to%20Cloud%20Storage%20Services\/Unapproved%20cloud%20storage%20services.csv\">I have provided file here on my Github<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"359\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-11-1024x359.png\" alt=\"\" class=\"wp-image-5372\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-11-1024x359.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-11-300x105.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-11-768x269.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-11.png 1096w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step3\">Step 3: Purview Data Loss Prevention (DLP) Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Now we can move on in creating the actual DLP policy which can be targeted to specific users\/devices.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"490\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-12-1024x490.png\" alt=\"\" class=\"wp-image-5374\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-12-1024x490.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-12-300x144.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-12-768x368.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-12-1536x735.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-12.png 1563w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Create DLP Policy<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"258\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-25-1024x258.png\" alt=\"\" class=\"wp-image-5387\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-25-1024x258.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-25-300x76.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-25-768x193.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-25.png 1330w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"528\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-26-1024x528.png\" alt=\"\" class=\"wp-image-5388\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-26-1024x528.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-26-300x155.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-26-768x396.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-26.png 1296w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"457\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-13-1024x457.png\" alt=\"\" class=\"wp-image-5375\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-13-1024x457.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-13-300x134.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-13-768x343.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-13.png 1281w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"345\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-14-1024x345.png\" alt=\"\" class=\"wp-image-5376\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-14-1024x345.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-14-300x101.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-14-768x259.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-14.png 1279w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"872\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-15-1024x872.png\" alt=\"\" class=\"wp-image-5377\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-15-1024x872.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-15-300x255.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-15-768x654.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-15.png 1279w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"673\" height=\"1024\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-16-673x1024.png\" alt=\"\" class=\"wp-image-5378\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-16-673x1024.png 673w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-16-197x300.png 197w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-16.png 685w\" sizes=\"auto, (max-width: 673px) 100vw, 673px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How to implement global settings with exceptions (exclude groups) ?<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"712\" height=\"489\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-17.png\" alt=\"\" class=\"wp-image-5379\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-17.png 712w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-17-300x206.png 300w\" sizes=\"auto, (max-width: 712px) 100vw, 712px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"712\" height=\"389\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-19.png\" alt=\"\" class=\"wp-image-5381\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-19.png 712w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-19-300x164.png 300w\" sizes=\"auto, (max-width: 712px) 100vw, 712px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Create DLP Rule (inside the DLP Policy)<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">DLP Rule: Conditions<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"445\" height=\"767\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-32.png\" alt=\"\" class=\"wp-image-5396\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-32.png 445w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-32-174x300.png 174w\" sizes=\"auto, (max-width: 445px) 100vw, 445px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"545\" height=\"421\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-23.png\" alt=\"\" class=\"wp-image-5385\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-23.png 545w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-23-300x232.png 300w\" sizes=\"auto, (max-width: 545px) 100vw, 545px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"486\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-21-1024x486.png\" alt=\"\" class=\"wp-image-5383\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-21-1024x486.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-21-300x143.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-21-768x365.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-21-1536x730.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-21.png 2027w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DLP Rule: Actions<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"892\" height=\"341\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-34.png\" alt=\"\" class=\"wp-image-5398\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-34.png 892w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-34-300x115.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-34-768x294.png 768w\" sizes=\"auto, (max-width: 892px) 100vw, 892px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"510\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-22-1024x510.png\" alt=\"\" class=\"wp-image-5384\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-22-1024x510.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-22-300x149.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-22-768x382.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-22-1536x764.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-22-2048x1019.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"125\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-27-1024x125.png\" alt=\"\" class=\"wp-image-5389\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-27-1024x125.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-27-300x37.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-27-768x94.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-27-1536x187.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-27.png 1655w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"738\" height=\"368\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-28.png\" alt=\"\" class=\"wp-image-5390\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-28.png 738w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-28-300x150.png 300w\" sizes=\"auto, (max-width: 738px) 100vw, 738px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"443\" height=\"186\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-29.png\" alt=\"\" class=\"wp-image-5391\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-29.png 443w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-29-300x126.png 300w\" sizes=\"auto, (max-width: 443px) 100vw, 443px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"97\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-30-1024x97.png\" alt=\"\" class=\"wp-image-5392\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-30-1024x97.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-30-300x28.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-30-768x73.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-30-1536x146.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-30.png 1657w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DLP Rule: Notifications<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"896\" height=\"761\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-24.png\" alt=\"\" class=\"wp-image-5386\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-24.png 896w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-24-300x255.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-24-768x652.png 768w\" sizes=\"auto, (max-width: 896px) 100vw, 896px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"396\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-36-1024x396.png\" alt=\"\" class=\"wp-image-5400\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-36-1024x396.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-36-300x116.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-36-768x297.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-36.png 1258w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"429\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-20-1024x429.png\" alt=\"\" class=\"wp-image-5382\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-20-1024x429.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-20-300x126.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-20-768x322.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-20.png 1295w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step4\">Step 4: Wait up to 24 hours !!<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Now wait until Policy Sync has completed<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can verify status on both policy and devices to see status.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"694\" height=\"363\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-35.png\" alt=\"\" class=\"wp-image-5399\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-35.png 694w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-35-300x157.png 300w\" sizes=\"auto, (max-width: 694px) 100vw, 694px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"587\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-43-1024x587.png\" alt=\"\" class=\"wp-image-5443\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-43-1024x587.png 1024w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-43-300x172.png 300w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-43-768x440.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-43-1536x880.png 1536w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-43-2048x1174.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1011\" height=\"1024\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-45-1011x1024.png\" alt=\"\" class=\"wp-image-5445\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-45-1011x1024.png 1011w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-45-296x300.png 296w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-45-768x778.png 768w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-45.png 1052w\" sizes=\"auto, (max-width: 1011px) 100vw, 1011px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"728\" height=\"409\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-44.png\" alt=\"\" class=\"wp-image-5444\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-44.png 728w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-44-300x169.png 300w\" sizes=\"auto, (max-width: 728px) 100vw, 728px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step5\">Step 5: Verify Upload is Blocked, while Download is Allowed<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Verify Upload has been blocked<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Try to go to Wetransfer.com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Add file, enter mail address (to) &#8211; and click on Transfer<\/p>\n\n\n\n<figure class=\"wp-block-image size-medium\"><img loading=\"lazy\" decoding=\"async\" width=\"177\" height=\"300\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-37-177x300.png\" alt=\"\" class=\"wp-image-5402\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-37-177x300.png 177w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-37.png 598w\" sizes=\"auto, (max-width: 177px) 100vw, 177px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Now you should see this popup showing that Upload has been blocked<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"379\" height=\"443\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-38.png\" alt=\"\" class=\"wp-image-5403\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-38.png 379w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-38-257x300.png 257w\" sizes=\"auto, (max-width: 379px) 100vw, 379px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Verify Download is still working<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you receive a link from for example WeTransfer with a waiting file, you should still be able to download that, as download hasn&#8217;t been blocked.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"331\" height=\"444\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-39.png\" alt=\"\" class=\"wp-image-5404\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-39.png 331w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-39-224x300.png 224w\" sizes=\"auto, (max-width: 331px) 100vw, 331px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"305\" height=\"123\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-40.png\" alt=\"\" class=\"wp-image-5405\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-40.png 305w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-40-300x121.png 300w\" sizes=\"auto, (max-width: 305px) 100vw, 305px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Verify use of Unallowed browsers are working<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Here is an example when I try to use WeTransfer through Opera browser<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"372\" height=\"382\" src=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-46.png\" alt=\"\" class=\"wp-image-5453\" srcset=\"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-46.png 372w, https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-46-292x300.png 292w\" sizes=\"auto, (max-width: 372px) 100vw, 372px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"step6\">Step 6: Ensure additional storage providers are restricted in Outlook on the web<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">By default additional storage providers are allowed in Office on the Web (such as Box,<br>Dropbox, Facebook, Google Drive, OneDrive Personal, etc.). This could lead to<br>information leakage and additional risk of infection from organizational non-trusted<br>storage providers. Restricting this will inherently reduce risk as it will narrow<br>opportunities for infection and data leakage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The setting <em>AdditionalStorageProvidersAvailable<\/em> allows users to open certain external files while working in Outlook on the web. If allowed, keep in mind that Microsoft doesn&#8217;t control the use terms or privacy policies of those third-party services.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What it <strong>blocks<\/strong>:<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Users <strong>cannot add third-party storage accounts<\/strong> to OWA.<\/li>\n\n\n\n<li>Users <strong>cannot browse or attach files from third-party storage<\/strong> when composing emails.<\/li>\n\n\n\n<li>Users <strong>cannot upload attachments to third-party storage<\/strong> via OWA.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">What it <strong>does not block<\/strong>:<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It <strong>does not block downloading attachments<\/strong> from emails.<\/li>\n\n\n\n<li>It <strong>does not block uploading\/downloading attachments<\/strong> to\/from <strong>OneDrive for Business<\/strong>, unless you specifically disable OneDrive access using a different setting.<\/li>\n\n\n\n<li>It <strong>does not block uploading a file directly from the local computer<\/strong> when composing an email.<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>Restrict additional storage providers are restricted using PowerShell:\n\n1. Connect to Exchange Online using Connect-ExchangeOnline\nConnect-ExchangeOnline\n\n2. Run the following PowerShell command:\n\nSet-OwaMailboxPolicy -Identity OwaMailboxPolicy-Default -AdditionalStorageProvidersAvailable $false\n\n3. Run the following Powershell command to verify that the value is now False:\n\nGet-OwaMailboxPolicy | Format-Table Name, AdditionalStorageProvidersAvailable<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>This blog was created in response to recent policy changes related to the WeTransfer cloud storage service. These changes raised &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"How to Block Upload to WeTransfer, DropBox &amp; Google Drive (but Allowing Download) &#8211; using Microsoft Purview Data Loss Prevention (DLP)\" class=\"read-more button\" href=\"https:\/\/mortenknudsen.net\/?p=5359#more-5359\" aria-label=\"Read more about How to Block Upload to WeTransfer, DropBox &amp; Google Drive (but Allowing Download) &#8211; using Microsoft Purview Data Loss Prevention (DLP)\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":5408,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"ngg_post_thumbnail":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[202,42,204,160,56,133,134,203,132],"tags":[199,16,206,205,209,208,166,17,207],"class_list":["post-5359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-defender-for-endpoint","category-dlp","category-intune","category-m365-security","category-microsoft-security","category-mvpbuzz","category-purview","category-security","tag-ai","tag-data-compliance","tag-data-loss-prevention","tag-dlp","tag-dropbox","tag-google-drive","tag-microsoft","tag-security","tag-wetransfer","infinite-scroll-item","resize-featured-image"],"featured_image_src":"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-42.png","author_info":{"display_name":"Morten Knudsen","author_link":"https:\/\/mortenknudsen.net\/?author=1"},"jetpack_featured_media_url":"https:\/\/mortenknudsen.net\/wp-content\/uploads\/2025\/07\/image-42.png","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=\/wp\/v2\/posts\/5359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5359"}],"version-history":[{"count":42,"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=\/wp\/v2\/posts\/5359\/revisions"}],"predecessor-version":[{"id":5462,"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=\/wp\/v2\/posts\/5359\/revisions\/5462"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=\/wp\/v2\/media\/5408"}],"wp:attachment":[{"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mortenknudsen.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}