You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/app-only-auth-powershell-v2.md
+7-7Lines changed: 7 additions & 7 deletions
Original file line number
Diff line number
Diff line change
@@ -216,15 +216,15 @@ Choose **one** of the following methods in this section to assign API permission
216
216
217
217

218
218
219
-
5. On the **What type of permissions does your application require?** flyout that appears, select **Application permissions**.
219
+
4. On the **What type of permissions does your application require?** flyout that appears, select **Application permissions**.
220
220
221
-
6. In the permissions list that appears, expand **Exchange**, select **Exchange.ManageAsApp**, and then select **Add permissions**.
221
+
5. In the permissions list that appears, expand **Exchange**, select **Exchange.ManageAsApp**, and then select **Add permissions**.
222
222
223
223

224
224
225
-
7. Back on the app **API permissions** page, verify **Office 365 Exchange Online** \> **Exchange.ManageAsApp** is listed and contains the following values:
225
+
6. Back on the app **API permissions** page, verify **Office 365 Exchange Online** \> **Exchange.ManageAsApp** is listed and contains the following values:
226
226
- **Type**: **Application**.
227
-
- **Admin consent required**: **Yes**.
227
+
- **Admin consent required**: **Yes**.
228
228
229
229
- **Status**: The current incorrect value is **Not granted for \<Organization\>**.
230
230
@@ -236,11 +236,11 @@ Choose **one** of the following methods in this section to assign API permission
236
236
237
237

238
238
239
-
8. For the default **Microsoft Graph** \> **User.Read** entry, select **...** \> **Revoke admin consent**, and then select **Yes** in the confirmation dialog that opens to return **Status** back to the default blank value.
239
+
7. For the default **Microsoft Graph** \> **User.Read** entry, select **...** \> **Revoke admin consent**, and then select **Yes** in the confirmation dialog that opens to return **Status** back to the default blank value.
240
240
241
241

242
242
243
-
9. Close the current **API permissions** page (not the browser tab) to return to the **App registrations** page. You use the **App registrations** page in an upcoming step.
243
+
8. Close the current **API permissions** page (not the browser tab) to return to the **App registrations** page. You use the **App registrations** page in an upcoming step.
244
244
245
245
#### Modify the app manifest to assign API permissions
246
246
@@ -310,7 +310,7 @@ Choose **one** of the following methods in this section to assign API permission
310
310
311
311
4. On the **API permissions** page, verify **Office 365 Exchange Online** \> **Exchange.ManageAsApp** is listed and contains the following values:
312
312
- **Type**: **Application**.
313
-
- **Admin consent required**: **Yes**.
313
+
- **Admin consent required**: **Yes**.
314
314
315
315
- **Status**: The current incorrect value is **Not granted for \<Organization\>** for the **Office 365 Exchange Online** \> **Exchange.ManageAsApp** entry.
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/client-advanced-settings.md
+40-44Lines changed: 40 additions & 44 deletions
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ ms.localizationpriority: high
13
13
ms.collection:
14
14
- tier3
15
15
- purview-compliance
16
-
search.appverid:
16
+
search.appverid:
17
17
description: "Security & Compliance PowerShell advanced settings for Microsoft Purview Information Protection client."
18
18
---
19
19
@@ -26,14 +26,13 @@ This article contains the [Security & Compliance PowerShell](/powershell/exchang
26
26
27
27
The advanced settings that are supported by sensitivity labels built into Microsoft 365 apps and services are included on the cmdlet page itself. You might also find useful [PowerShell tips for specifying the advanced settings](/purview/create-sensitivity-labels#powershell-tips-for-specifying-the-advanced-settings).
28
28
29
-
30
29
|Advanced settings for labels|Description|
31
-
|----------------|---------------|
32
-
[Color](#color)|Specify a color for the label|
30
+
|---|---|
31
+
|[Color](#color)|Specify a color for the label|
33
32
|[DefaultSubLabelId](#defaultsublabelid)|Specify a default sublabel for a parent label|
34
33
35
34
|Advanced settings for label policies|Description|
36
-
|----------------|---------------|
35
+
|---|---|
37
36
|[AdditionalPPrefixExtensions](#additionalpprefixextensions)|Support for changing \<EXT>.PFILE to P\<EXT>|
38
37
|[EnableAudit](#enableaudit)|Prevent audit data from being sent to Microsoft Purview|
39
38
|[EnableContainerSupport](#enablecontainersupport)|Enable removal of encryption from PST, rar, 7zip, and MSG files|
@@ -53,24 +52,23 @@ The advanced settings that are supported by sensitivity labels built into Micros
|[UseCopyAndPreserveNTFSOwner](#usecopyandpreserventfsowner)|Preserve NTFS owners during labeling|
55
54
56
-
57
55
## AdditionalPPrefixExtensions
58
56
59
-
This advanced property to change \<EXT>.PFILE to P\<EXT> is supported by File Explorer, PowerShell, and by the scanner. All apps have similar behavior.
57
+
This advanced property to change \<EXT>.PFILE to P\<EXT> is supported by File Explorer, PowerShell, and by the scanner. All apps have similar behavior.
60
58
61
59
- Key: **AdditionalPPrefixExtensions**
62
60
63
-
- Value: **\<string value>**
61
+
- Value: **\<string value>**
64
62
65
63
Use the following table to identify the string value to specify:
66
64
67
65
| String value| Client and scanner|
68
-
|-------------|---------------|
66
+
|---|---|
69
67
|\*|All PFile extensions become P\<EXT>|
70
68
|\<null value>| Default value behaves like the default encryption value.|
71
-
|ConvertTo-Json(".dwg", ".zip")|In addition to the previous list, ".dwg" and ".zip" become P\<EXT>|
69
+
|ConvertTo-Json(".dwg", ".zip")|In addition to the previous list, ".dwg" and ".zip" become P\<EXT>|
72
70
73
-
With this setting, the following extensions always become **P\<EXT>**: ".txt", ".xml", ".bmp", ".jt", ".jpg", ".jpeg", ".jpe", ".jif", ".jfif", ".jfi", ".png", ".tif", ".tiff", ".gif"). Notable exclusion is that "ptxt" does not become "txt.pfile".
71
+
With this setting, the following extensions always become **P\<EXT>**: ".txt", ".xml", ".bmp", ".jt", ".jpg", ".jpeg", ".jpe", ".jif", ".jfif", ".jfi", ".png", ".tif", ".tiff", ".gif"). Notable exclusion is that "ptxt" does not become "txt.pfile".
74
72
75
73
This setting requires the advanced setting *PFileSupportedExtension* to be enabled.
76
74
@@ -80,13 +78,13 @@ This setting requires the advanced setting *PFileSupportedExtension* to be enabl
**Example 2**: PowerShell command to change all PFile extensions from generic encryption to native encryption when the files are labeled and encrypted:
81
+
**Example 2**: PowerShell command to change all PFile extensions from generic encryption to native encryption when the files are labeled and encrypted:
@@ -112,7 +110,7 @@ Set-Label -Identity Public -AdvancedSettings @{color="#40e0d0"}
112
110
113
111
## DefaultSubLabelId
114
112
115
-
When you add a sublabel to a label, users can no longer apply the parent label to a document or email. By default, users select the parent label to see the sublabels that they can apply, and then select one of those sublabels. If you configure this advanced setting, when users select the parent label, a sublabel is automatically selected and applied for them:
113
+
When you add a sublabel to a label, users can no longer apply the parent label to a document or email. By default, users select the parent label to see the sublabels that they can apply, and then select one of those sublabels. If you configure this advanced setting, when users select the parent label, a sublabel is automatically selected and applied for them:
116
114
117
115
- Key: **DefaultSubLabelId**
118
116
@@ -226,7 +224,7 @@ Set-LabelPolicy -Identity Global -AdvancedSettings @{JustificationTextForUserTex
226
224
227
225
By default, the information protection client doesn't send content matches for sensitive info types to Microsoft Purview, which can then be displayed in [activity explorer](/purview/data-classification-activity-explorer). The scanner always sends this information. For more information about this additional information that can be sent, see [Content matches for deeper analysis](/azure/information-protection/reports-aip#content-matches-for-deeper-analysis).
228
226
229
-
To send content matches when sensitive information types are sent, use the following advanced setting in a label policy:
227
+
To send content matches when sensitive information types are sent, use the following advanced setting in a label policy:
230
228
231
229
- Key: **LogMatchedContent**
232
230
@@ -246,10 +244,10 @@ If you have a complex Excel file with many sheets or rows, 3 seconds might not b
246
244
247
245
- Key: **OfficeContentExtractionTimeout**
248
246
249
-
- Value: Seconds, in the following format: `hh:mm:ss`.
247
+
- Value: Seconds, in the following format: `hh:mm:ss`.
250
248
251
249
> [!IMPORTANT]
252
-
> We recommend that you don't raise this timeout to higher than 15 seconds.
250
+
> We recommend that you don't raise this timeout to higher than 15 seconds.
253
251
254
252
Example PowerShell command, where your label policy is named "Global":
255
253
@@ -265,16 +263,16 @@ With this setting, you can change which file types are encrypted but you cannot
265
263
266
264
- Key: **PFileSupportedExtensions**
267
265
268
-
- Value: **\<string value>**
266
+
- Value: **\<string value>**
269
267
270
268
Use the following table to identify the string value to specify:
271
269
272
-
| String value|Client|Scanner|
273
-
|-------------|-------|--------|
270
+
| String value|Client|Scanner|
271
+
|---|---|---|
274
272
|\*|Default value: Apply encryption to all file types|Apply encryption to all file types|
275
273
|ConvertTo-Json(".jpg", ".png")|In addition to Office file types and PDF files, apply encryption to the specified file name extensions | In addition to Office file types and PDF files, apply encryption to the specified file name extensions
276
274
277
-
**Example 1**: PowerShell command for the scanner to encrypt all file types, where your label policy is named "Scanner":
275
+
**Example 1**: PowerShell command for the scanner to encrypt all file types, where your label policy is named "Scanner":
When you specify the following advanced client setting, users see a **Report an Issue** option that they can select from the **Help and Feedback** client dialog box in the file labeler. Specify an HTTP string for the link. For example, a customized web page that you have for users to report issues, or an email address that goes to your help desk.
289
+
When you specify the following advanced client setting, users see a **Report an Issue** option that they can select from the **Help and Feedback** client dialog box in the file labeler. Specify an HTTP string for the link. For example, a customized web page that you have for users to report issues, or an email address that goes to your help desk.
292
290
293
291
To configure this advanced setting, enter the following strings for the selected label policy:
294
292
@@ -306,50 +304,48 @@ Example PowerShell command, where your label policy is named "Global":
306
304
Set-LabelPolicy -Identity Global -AdvancedSettings @{ReportAnIssueLink="mailto:[email protected]"}
307
305
```
308
306
309
-
310
307
## ScannerMaxCPU
311
308
312
309
> [!IMPORTANT]
313
310
> We recommend limiting CPU consumption by using the advanced settings *ScannerMaxCPU* and *ScannerMinCPU* instead of *ScannerConcurrencyLevel* that's supported for backwards compatibility.
314
-
>
311
+
>
315
312
> If the older advanced setting is specified,*ScannerMaxCPU* and *ScannerMinCPU* advanced settings are ignored.
316
313
317
-
Use this advanced setting in conjunction with *ScannerMinCPU* to limit CPU consumption on the scanner computer.
314
+
Use this advanced setting in conjunction with *ScannerMinCPU* to limit CPU consumption on the scanner computer.
318
315
319
316
- Key: **ScannerMaxCPU**
320
317
321
318
- Value: \<number>**
322
319
323
-
The value is set to **100** by default, which means there is no limit of maximum CPU consumption. In this case, the scanner process will try to use all available CPU time to maximize your scan rates.
320
+
The value is set to **100** by default, which means there is no limit of maximum CPU consumption. In this case, the scanner process will try to use all available CPU time to maximize your scan rates.
324
321
325
-
If you set **ScannerMaxCPU** to less than 100, the scanner will monitor the CPU consumption over the last 30 minutes. If the average CPU crossed the limit you set, it will start to reduce the number of threads allocated for new files.
322
+
If you set **ScannerMaxCPU** to less than 100, the scanner will monitor the CPU consumption over the last 30 minutes. If the average CPU crossed the limit you set, it will start to reduce the number of threads allocated for new files.
326
323
327
324
The limit on the number of threads will continue as long as CPU consumption is higher than the limit set for **ScannerMaxCPU**.
328
325
329
326
## ScannerMinCPU
330
327
331
328
> [!IMPORTANT]
332
329
> We recommend limiting CPU consumption by using the advanced settings *ScannerMaxCPU* and *ScannerMinCPU* instead of *ScannerConcurrencyLevel* that's supported for backwards compatibility.
333
-
>
330
+
>
334
331
> If the older advanced setting is specified,*ScannerMaxCPU* and *ScannerMinCPU* advanced settings are ignored.
335
332
336
-
Used only if *ScannerMaxCPU* is not equal to 100, and cannot be set to a number that is higher than the **ScannerMaxCPU** value.
333
+
Used only if *ScannerMaxCPU* is not equal to 100, and cannot be set to a number that is higher than the **ScannerMaxCPU** value.
337
334
338
-
We recommend keeping **ScannerMinCPU** set at least 15 points lower than the value of *ScannerMaxCPU*.
339
-
340
-
The value is set to **50** by default, which means that if CPU consumption in the last 30 minutes when lower than this value, the scanner will start adding new threads to scan more files in parallel, until the CPU consumption reaches the level you have set for *ScannerMaxCPU*-15.
335
+
We recommend keeping **ScannerMinCPU** set at least 15 points lower than the value of *ScannerMaxCPU*.
341
336
337
+
The value is set to **50** by default, which means that if CPU consumption in the last 30 minutes when lower than this value, the scanner will start adding new threads to scan more files in parallel, until the CPU consumption reaches the level you have set for *ScannerMaxCPU*-15.
342
338
343
339
## ScannerConcurrencyLevel
344
340
345
341
> [!IMPORTANT]
346
342
> We recommend limiting CPU consumption by using the advanced settings *ScannerMaxCPU* and *ScannerMinCPU* instead of *ScannerConcurrencyLevel* that's supported for backwards compatibility.
347
-
>
343
+
>
348
344
> When this older advanced setting is specified,*ScannerMaxCPU* and *ScannerMinCPU* advanced settings are ignored.
349
345
350
-
By default, the scanner uses all available processor resources on the computer running the scanner service. If you need to limit the CPU consumption while this service is scanning, specify the number of concurrent threads that the scanner can run in parallel. The scanner uses a separate thread for each file that it scans, so this throttling configuration also defines the number of files that can be scanned in parallel.
346
+
By default, the scanner uses all available processor resources on the computer running the scanner service. If you need to limit the CPU consumption while this service is scanning, specify the number of concurrent threads that the scanner can run in parallel. The scanner uses a separate thread for each file that it scans, so this throttling configuration also defines the number of files that can be scanned in parallel.
351
347
352
-
When you first configure the value for testing, we recommend you specify 2 per core, and then monitor the results. For example, if you run the scanner on a computer that has 4 cores, first set the value to 8. If necessary, increase or decrease that number, according to the resulting performance you require for the scanner computer and your scanning rates.
348
+
When you first configure the value for testing, we recommend you specify 2 per core, and then monitor the results. For example, if you run the scanner on a computer that has 4 cores, first set the value to 8. If necessary, increase or decrease that number, according to the resulting performance you require for the scanner computer and your scanning rates.
By default, the information protection scanner scans all relevant files. However, you might want to define specific files to be skipped, such as for archived files or files that have been moved.
362
+
By default, the information protection scanner scans all relevant files. However, you might want to define specific files to be skipped, such as for archived files or files that have been moved.
367
363
368
364
Enable the scanner to skip specific files based on their file attributes by using the **ScannerFSAttributesToSkip** advanced setting. In the setting value, list the file attributes that will enable the file to be skipped when they are all set to **true**. This list of file attributes uses the AND logic.
369
365
@@ -386,13 +382,14 @@ Set-LabelPolicy -Identity Global -AdvancedSettings @{ ScannerFSAttributesToSkip
386
382
387
383
> [!TIP]
388
384
> We recommend that you consider enabling the scanner to skip files with the following attributes:
389
-
> * FILE_ATTRIBUTE_SYSTEM
390
-
> * FILE_ATTRIBUTE_HIDDEN
391
-
> * FILE_ATTRIBUTE_DEVICE
392
-
> * FILE_ATTRIBUTE_OFFLINE
393
-
> * FILE_ATTRIBUTE_RECALL_ON_DATA_ACCESS
394
-
> * FILE_ATTRIBUTE_RECALL_ON_OPEN
395
-
> * FILE_ATTRIBUTE_TEMPORARY
385
+
>
386
+
> - FILE_ATTRIBUTE_SYSTEM
387
+
> - FILE_ATTRIBUTE_HIDDEN
388
+
> - FILE_ATTRIBUTE_DEVICE
389
+
> - FILE_ATTRIBUTE_OFFLINE
390
+
> - FILE_ATTRIBUTE_RECALL_ON_DATA_ACCESS
391
+
> - FILE_ATTRIBUTE_RECALL_ON_OPEN
392
+
> - FILE_ATTRIBUTE_TEMPORARY
396
393
397
394
For a list of all file attributes that can be defined in the **ScannerFSAttributesToSkip** advanced setting, see the [Win32 File Attribute Constants](/windows/win32/fileio/file-attribute-constants)
398
395
@@ -437,4 +434,3 @@ Example PowerShell command, where your label policy is named "Scanner"
437
434
```PowerShell
438
435
Set-LabelPolicy -Identity Global -AdvancedSettings @{UseCopyAndPreserveNTFSOwner ="true"}
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/find-exchange-cmdlet-permissions.md
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -87,7 +87,7 @@ Otherwise, no results are likely caused by one of the following conditions:
87
87
To find the roles in your environment (if any) that contain the cmdlet or parameters, replace `<Cmdlet>` and optionally, `<Parameter1>,<Parameter2>,...` with the values that you want to use and run the following command:
0 commit comments