Skip to main content
Question

Whitelisting Onedrive & MS teams in Windows Medium Flex policy

  • September 16, 2024
  • 2 replies
  • 229 views

Forum|alt.badge.img

How to whitelist the two events below on Windows Medium Flex policy? 

 

 

2 replies

  • BeyondTrust Employee
  • September 16, 2024

Hi there,

Based on your screenshot this looks to be hitting a Content Rule you have configured under “All Users”, not an Application Rule.

I’d suggest reviewing your policy (Workstyles > All Users > “Content Rules” tab) to double check which of those rules have “Allow Message (Yes / No)” configured on them.

For example:

 

I hope this helps!


Paul
BeyondTrust Employee
  • BeyondTrust Employee
  • September 18, 2024

This certainly looks like a policy misconfiguration, as there is no reason that interactions with these content items should require any elevated rights. 

As per Neil’s suggestion I would review the underlying configuration which is producing these messages (the associated audit events will provide the necessary details to isolate this, if it is not clear), but this should not be a case of allowlisting these items - it is correcting the misconfiguration which is causing this to occur in the first place.