SCAutoSensitivityLabelRule - Setting error
hvdbrink opened this issue · 1 comments
Description of the issue
When importing an SCAutoSensitivityLabelRule it fails because during the proces the variable $HeaderMatchesPatterns is getting filled even when it's not even specified in the configuration.
`[DBG]: [Process:52604]: [Runspace195]: PS C:\WINDOWS\system32>> $CreationParams
Key Value
Name General Data Protection Regulation (GDPR) Enhanced-ODB
Policy Labelingpolicy
ContentContainsSensitiveInformation {System.Collections.Hashtable, System.Collections.Hashtable, System.Collections.H...
Disabled False
DocumentIsPasswordProtected False
DocumentIsUnsupported False
ExceptIfDocumentIsPasswordProtected False
ExceptIfDocumentIsUnsupported False
ExceptIfProcessingLimitExceeded False
ProcessingLimitExceeded False
ReportSeverityLevel Low
Workload Exchange
HeaderMatchesPatterns {}
Verbose True
`
When creating the labelpolicyrule you'll get this error
Write-ErrorMessage : |Microsoft.Exchange.Management.UnifiedPolicy.ErrorPredicateLocationSupportException|Using the 'HeaderMatchesPatterns' parameter is supported only for Exchange content. Either remove this parameter or turn on only the Exchange location.
Microsoft 365 DSC Version
1.24.424.1
Which workloads are affected
Security & Compliance Center
The DSC configuration
`
SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-SSB AutoLabeling Restrictions"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
ApplySensitivityLabel = "Label-03B";
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
Comment = "SSB Autolabeling policy restriction sensitive data GDPR (AVG)";
Ensure = "Present";
ExchangeLocation = @("All");
ExchangeSender = @();
ExchangeSenderException = @();
ExchangeSenderMemberOf = @();
ExchangeSenderMemberOfException = @();
Mode = "TestWithoutNotifications";
Name = "SSB AutoLabeling Restrictions";
OneDriveLocation = @("All");
OneDriveLocationException = @();
Priority = 0;
SharePointLocation = @("All");
SharePointLocationException = @();
TenantId = $OrganizationName;
}
SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-SSB AutoLabeling High Restrictions"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
ApplySensitivityLabel = "Label-03C";
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
Comment = "SSB Autolabeling restriction sensitive data High Restrictions.";
Ensure = "Present";
ExchangeLocation = @("All");
ExchangeSender = @();
ExchangeSenderException = @();
ExchangeSenderMemberOf = @();
ExchangeSenderMemberOfException = @();
Mode = "TestWithoutNotifications";
Name = "SSB AutoLabeling High Restrictions";
OneDriveLocation = @("All");
OneDriveLocationException = @();
Priority = 1;
SharePointLocation = @("All");
SharePointLocationException = @();
TenantId = $OrganizationName;
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High EXO-Exchange"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High EXO";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "Exchange";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High EXO-SharePoint"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High EXO";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "SharePoint";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High EXO-OneDriveForBusiness"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High EXO";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "OneDriveForBusiness";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - SPO-Exchange"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High - SPO";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "Exchange";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - SPO-SharePoint"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High - SPO";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "SharePoint";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - SPO-OneDriveForBusiness"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High - SPO";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "OneDriveForBusiness";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - ODB-Exchange"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High - ODB";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "Exchange";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - ODB-SharePoint"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High - ODB";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "SharePoint";
}
SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - ODB-OneDriveForBusiness"
{
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
SensitiveInformation = @(
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Citizen''s Service (BSN) Number'
id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Driver''s License Number'
id = '6247fbea-ab80-4be5-8233-308b7c031401'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Passport Number'
id = '61786727-bafd-45f6-94d9-888d815e228e'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Physical Addresses'
id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
maxconfidence = '100'
minconfidence = '75'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Tax Identification Number'
id = '01f42a64-eba7-4892-a67b-398237e4ade2'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'Netherlands Value Added Tax Number'
id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
MSFT_SCDLPSensitiveInformation
{
name = 'International Banking Account Number (IBAN)'
id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
maxconfidence = '100'
minconfidence = '85'
classifiertype = 'Content'
mincount = '51'
maxcount = '-1'
}
)
};
Disabled = $False;
DocumentIsPasswordProtected = $False;
DocumentIsUnsupported = $False;
Ensure = "Present";
ExceptIfDocumentIsPasswordProtected = $False;
ExceptIfDocumentIsUnsupported = $False;
ExceptIfProcessingLimitExceeded = $False;
Name = "General Data Protection Regulation (GDPR) High - ODB";
Policy = "SSB AutoLabeling High Restrictions";
ProcessingLimitExceeded = $False;
ReportSeverityLevel = "Low";
TenantId = $OrganizationName;
Workload = "OneDriveForBusiness";
}
`
Verbose logs showing the problem
`DocumentIsPasswordProtected=False DocumentIsUnsupported=False ExceptIfDocumentIsPasswordProtected=False ExceptIfDocumentIsUnsupported=False ExceptIfProcessingLimitExceeded=False Name=General Data Protection Regulation (GDPR) Enhanced-EXO Policy=SSB AutoLabeling Restrictions ProcessingLimitExceeded=False ReportSeverityLevel=Low Verbose=True Workload=Exchange VERBOSE: [DESKTOP-UOVT50U]: [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Returning precomputed version info: 3.4.0 VERBOSE: [DESKTOP-UOVT50U]: [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] POST with -1-byte payload VERBOSE: [DESKTOP-UOVT50U]: [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Query 1 failed. VERBOSE: [DESKTOP-UOVT50U]: [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Getting message from error object |Microsoft.Exchange.Management.UnifiedPolicy.ErrorPredicateLocationSupportException|Using the 'HeaderMatchesPatterns' parameter is supported only for Exchange content. Either remove this parameter or turn on only the Exchange location. + CategoryInfo : NotSpecified: (:) [], CimException
+ FullyQualifiedErrorId : [TimeStamp=Mon, 06 May 2024 13:17:46 GMT],Write-ErrorMessage
+ PSComputerName : localhost
VERBOSE: [DESKTOP-UOVT50U]: [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Flipping the parent policy to Mode back to TestWithoutNotifications while we create the rule
WARNING: [DESKTOP-UOVT50U]: [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Any updates to auto labeling policy requires simulation to be restarted. Please use
Set-AutoSensitivityLabelPolicy to set StartSimulation to $true for changes to be reflected.
VERBOSE: [DESKTOP-UOVT50U]: LCM: [ End Set ] [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] in 21.3180 seconds.
The PowerShell DSC resource '[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange' with SourceInfo 'C:\M365DSC\Export\SC\RWO-V-SC.ps1::887::3::SCAutoSensitivityLabelRule' threw one or more non-terminating errors
while running the Set-TargetResource functionality. These errors are logged to the ETW channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details. + CategoryInfo : InvalidOperation: (:) [], CimException + FullyQualifiedErrorId : NonTerminatingErrorFromProvider + PSComputerName : localhost VERBOSE: [DESKTOP-UOVT50U]: LCM: [ Start Resource ] [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-SharePoint] VERBOSE: [DESKTOP-UOVT50U]: LCM: [ Start Test ] [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-SharePoint] VERBOSE: [DESKTOP-UOVT50U]: [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-SharePoint] Importing the module MSFT_SCAutoSensitivityLabelRule in force mode.
`
Environment Information + PowerShell Version
OsName : Microsoft Windows 11 Pro
OsOperatingSystemSKU : 48
OsArchitecture : 64-bit
WindowsVersion : 2009
WindowsBuildLabEx : 22621.1.amd64fre.ni_release.220506-1250
OsLanguage : en-US
OsMuiLanguages : {en-US, en-GB}
Name Value
---- -----
PSVersion 5.1.22621.2506
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.22621.2506
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
Fixed this locally togother with @ykuijs by adjusting this on line 625 :
From
$HeaderMatchesPatternsValue = @{}
if ($null -ne $HeaderMatchesPatterns -and $null -ne $HeaderMatchesPatterns.Name)
{
$HeaderMatchesPatternsValue.Add($HeaderMatchesPatterns.Name, $HeaderMatchesPatterns.Values)
}
To :
if ($null -ne $HeaderMatchesPatterns -and $null -ne $HeaderMatchesPatterns.Name)
{
$HeaderMatchesPatternsValue = @{}
$HeaderMatchesPatternsValue.Add($HeaderMatchesPatterns.Name, $HeaderMatchesPatterns.Values)
}
Have to note when running this there is a notification that the min and maxconfidence is deprecated and will be replaced by confidencelevel