Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SCAutoSensitivityLabelRule - Setting error #4641

Closed
hvdbrink opened this issue May 6, 2024 · 1 comment · Fixed by #5062 or #5132
Closed

SCAutoSensitivityLabelRule - Setting error #4641

hvdbrink opened this issue May 6, 2024 · 1 comment · Fixed by #5062 or #5132
Labels
Bug Something isn't working Security & Compliance Center V1.24.424.1 Version 1.24.424.1

Comments

@hvdbrink
Copy link

hvdbrink commented May 6, 2024 •
edited by ykuijs
Loading

Description of the issue

When importing an SCAutoSensitivityLabelRule it fails because during the proces the variable $HeaderMatchesPatterns is getting filled even when it's not even specified in the configuration.

[DBG]: [Process:52604]: [Runspace195]: PS C:\WINDOWS\system32>> $CreationParams

Key                                 Value                                                                               
---                                 -----                                                                               
Name                                General Data Protection Regulation (GDPR) Enhanced-ODB                              
Policy                              Labelingpolicy                                                      
ContentContainsSensitiveInformation {System.Collections.Hashtable, System.Collections.Hashtable, System.Collections.H...
Disabled                            False                                                                               
DocumentIsPasswordProtected         False                                                                               
DocumentIsUnsupported               False                                                                               
ExceptIfDocumentIsPasswordProtected False                                                                               
ExceptIfDocumentIsUnsupported       False                                                                               
ExceptIfProcessingLimitExceeded     False                                                                               
ProcessingLimitExceeded             False                                                                               
ReportSeverityLevel                 Low                                                                                 
Workload                            Exchange                                                                            
HeaderMatchesPatterns               {}                                                                                  
Verbose                             True

When creating the labelpolicyrule you'll get this error

Write-ErrorMessage : |Microsoft.Exchange.Management.UnifiedPolicy.ErrorPredicateLocationSupportException|Using the 'HeaderMatchesPatterns' parameter is supported only for Exchange content. Either remove this parameter or turn on only the Exchange location.

Microsoft 365 DSC Version

1.24.424.1

Which workloads are affected

Security & Compliance Center

The DSC configuration

		SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-SSB AutoLabeling Restrictions"
        {
            ApplicationId                   = $ConfigurationData.NonNodeData.ApplicationId;
            ApplySensitivityLabel           = "Label-03B";
            CertificateThumbprint           = $ConfigurationData.NonNodeData.CertificateThumbprint;
            Comment                         = "SSB Autolabeling policy restriction sensitive data GDPR (AVG)";
            Ensure                          = "Present";
            ExchangeLocation                = @("All");
            ExchangeSender                  = @();
            ExchangeSenderException         = @();
            ExchangeSenderMemberOf          = @();
            ExchangeSenderMemberOfException = @();
            Mode                            = "TestWithoutNotifications";
            Name                            = "SSB AutoLabeling Restrictions";
            OneDriveLocation                = @("All");
            OneDriveLocationException       = @();
            Priority                        = 0;
            SharePointLocation              = @("All");
            SharePointLocationException     = @();
            TenantId                        = $OrganizationName;
        }
        SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-SSB AutoLabeling High Restrictions"
        {
            ApplicationId                   = $ConfigurationData.NonNodeData.ApplicationId;
            ApplySensitivityLabel           = "Label-03C";
            CertificateThumbprint           = $ConfigurationData.NonNodeData.CertificateThumbprint;
            Comment                         = "SSB Autolabeling restriction sensitive data High Restrictions.";
            Ensure                          = "Present";
            ExchangeLocation                = @("All");
            ExchangeSender                  = @();
            ExchangeSenderException         = @();
            ExchangeSenderMemberOf          = @();
            ExchangeSenderMemberOfException = @();
            Mode                            = "TestWithoutNotifications";
            Name                            = "SSB AutoLabeling High Restrictions";
            OneDriveLocation                = @("All");
            OneDriveLocationException       = @();
            Priority                        = 1;
            SharePointLocation              = @("All");
            SharePointLocationException     = @();
            TenantId                        = $OrganizationName;
        }
		SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High EXO-Exchange"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High EXO";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "Exchange";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High EXO-SharePoint"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High EXO";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "SharePoint";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High EXO-OneDriveForBusiness"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High EXO";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "OneDriveForBusiness";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - SPO-Exchange"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High - SPO";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "Exchange";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - SPO-SharePoint"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High - SPO";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "SharePoint";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - SPO-OneDriveForBusiness"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High - SPO";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "OneDriveForBusiness";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - ODB-Exchange"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High - ODB";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "Exchange";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - ODB-SharePoint"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High - ODB";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "SharePoint";
        }
        SCAutoSensitivityLabelRule "SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) High - ODB-OneDriveForBusiness"
        {
            ApplicationId                       = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint               = $ConfigurationData.NonNodeData.CertificateThumbprint;
            ContentContainsSensitiveInformation = MSFT_SCDLPContainsSensitiveInformation {
                SensitiveInformation = @(
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Citizen''s Service (BSN) Number'
                        id = 'c5f54253-ef7e-44f6-a578-440ed67e946d'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Driver''s License Number'
                        id = '6247fbea-ab80-4be5-8233-308b7c031401'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Passport Number'
                        id = '61786727-bafd-45f6-94d9-888d815e228e'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Physical Addresses'
                        id = 'b3650e47-f2dc-4d29-a4fc-1b9154005c07'
                        maxconfidence = '100'
                        minconfidence = '75'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Tax Identification Number'
                        id = '01f42a64-eba7-4892-a67b-398237e4ade2'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'Netherlands Value Added Tax Number'
                        id = '4f320d9b-4972-41ae-b337-88d499bb1ade'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                    MSFT_SCDLPSensitiveInformation
                    {
                        name = 'International Banking Account Number (IBAN)'
                        id = 'e7dc4711-11b7-4cb0-b88b-2c394a771f0e'
                        maxconfidence = '100'
                        minconfidence = '85'
                        classifiertype = 'Content'
                        mincount = '51'
                        maxcount = '-1'
                    }
                )
            };
            Disabled                            = $False;
            DocumentIsPasswordProtected         = $False;
            DocumentIsUnsupported               = $False;
            Ensure                              = "Present";
            ExceptIfDocumentIsPasswordProtected = $False;
            ExceptIfDocumentIsUnsupported       = $False;
            ExceptIfProcessingLimitExceeded     = $False;
            Name                                = "General Data Protection Regulation (GDPR) High - ODB";
            Policy                              = "SSB AutoLabeling High Restrictions";
            ProcessingLimitExceeded             = $False;
            ReportSeverityLevel                 = "Low";
            TenantId                            = $OrganizationName;
            Workload                            = "OneDriveForBusiness";
        }

Verbose logs showing the problem

DocumentIsPasswordProtected=False                                                                                                                                                                                                                                                       DocumentIsUnsupported=False                                                                                                                                                                                                                                                             ExceptIfDocumentIsPasswordProtected=False                                                                                                                                                                                                                                               ExceptIfDocumentIsUnsupported=False                                                                                                                                                                                                                                                     ExceptIfProcessingLimitExceeded=False                                                                                                                                                                                                                                                   Name=General Data Protection Regulation (GDPR) Enhanced-EXO                                                                                                                                                                                                                             Policy=SSB AutoLabeling Restrictions                                                                                                                                                                                                                                                    ProcessingLimitExceeded=False                                                                                                                                                                                                                                                           ReportSeverityLevel=Low                                                                                                                                                                                                                                                                 Verbose=True                                                                                                                                                                                                                                                                            Workload=Exchange                                                                                                                                                                                                                                                                       VERBOSE: [DESKTOP-UOVT50U]:                            [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Returning precomputed version info: 3.4.0                                                               VERBOSE: [DESKTOP-UOVT50U]:                            [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] POST with -1-byte payload                                                                               VERBOSE: [DESKTOP-UOVT50U]:                            [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Query 1 failed.                                                                                         VERBOSE: [DESKTOP-UOVT50U]:                            [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Getting message from error object                                                                       |Microsoft.Exchange.Management.UnifiedPolicy.ErrorPredicateLocationSupportException|Using the 'HeaderMatchesPatterns' parameter is supported only for Exchange content. Either remove this parameter or turn on only the Exchange location.                                                 + CategoryInfo          : NotSpecified: (:) [], CimException
    + FullyQualifiedErrorId : [TimeStamp=Mon, 06 May 2024 13:17:46 GMT],Write-ErrorMessage
    + PSComputerName        : localhost

VERBOSE: [DESKTOP-UOVT50U]:                            [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Flipping the parent policy to Mode back to TestWithoutNotifications while we create the rule
WARNING: [DESKTOP-UOVT50U]:                            [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange] Any updates to auto labeling policy requires simulation to be restarted. Please use
Set-AutoSensitivityLabelPolicy to set StartSimulation to $true for changes to be reflected.
VERBOSE: [DESKTOP-UOVT50U]: LCM:  [ End    Set      ]  [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange]  in 21.3180 seconds.
The PowerShell DSC resource '[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-Exchange' with SourceInfo 'C:\M365DSC\Export\SC\RWO-V-SC.ps1::887::3::SCAutoSensitivityLabelRule' threw one or more non-terminating errors
while running the Set-TargetResource functionality. These errors are logged to the ETW channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.                                                                                                            + CategoryInfo          : InvalidOperation: (:) [], CimException                                                                                                                                                                                                                        + FullyQualifiedErrorId : NonTerminatingErrorFromProvider                                                                                                                                                                                                                               + PSComputerName        : localhost                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         VERBOSE: [DESKTOP-UOVT50U]: LCM:  [ Start  Resource ]  [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-SharePoint]                                                                                                       VERBOSE: [DESKTOP-UOVT50U]: LCM:  [ Start  Test     ]  [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-SharePoint]                                                                                                       VERBOSE: [DESKTOP-UOVT50U]:                            [[SCAutoSensitivityLabelRule]SCAutoSensitivityLabelRule-General Data Protection Regulation (GDPR) Enhanced-EXO-SharePoint] Importing the module MSFT_SCAutoSensitivityLabelRule in force mode.

Environment Information + PowerShell Version

OsName               : Microsoft Windows 11 Pro
OsOperatingSystemSKU : 48
OsArchitecture       : 64-bit
WindowsVersion       : 2009
WindowsBuildLabEx    : 22621.1.amd64fre.ni_release.220506-1250
OsLanguage           : en-US
OsMuiLanguages       : {en-US, en-GB}

Name                           Value
----                           -----
PSVersion                      5.1.22621.2506
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.22621.2506
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
@andikrueger andikrueger added Bug Something isn't working Security & Compliance Center V1.24.424.1 Version 1.24.424.1 labels May 6, 2024
@hvdbrink
Copy link
Author

hvdbrink commented May 7, 2024

Fixed this locally togother with @ykuijs by adjusting this on line 625 :

From

 $HeaderMatchesPatternsValue = @{}
if ($null -ne $HeaderMatchesPatterns -and $null -ne $HeaderMatchesPatterns.Name)
    {
        $HeaderMatchesPatternsValue.Add($HeaderMatchesPatterns.Name, $HeaderMatchesPatterns.Values)
    }

To :

if ($null -ne $HeaderMatchesPatterns -and $null -ne $HeaderMatchesPatterns.Name)
    {
        $HeaderMatchesPatternsValue = @{}
        $HeaderMatchesPatternsValue.Add($HeaderMatchesPatterns.Name, $HeaderMatchesPatterns.Values)
    }

Have to note when running this there is a notification that the min and maxconfidence is deprecated and will be replaced by confidencelevel

ykuijs added a commit to ykuijs/Microsoft365DSC that referenced this issue Sep 18, 2024
@ykuijs
Fixes SCAutoSensitivityLabelRule - Setting error microsoft#4641
62131ed
ykuijs added a commit to ykuijs/Microsoft365DSC that referenced this issue Sep 18, 2024
@ykuijs
Fixes SCAutoSensitivityLabelRule - Setting error microsoft#4641
3181d64
@ykuijs ykuijs mentioned this issue Sep 18, 2024
Merged
@NikCharlebois NikCharlebois mentioned this issue Oct 2, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Bug Something isn't working Security & Compliance Center V1.24.424.1 Version 1.24.424.1
Projects
None yet
Milestone
No milestone
2 participants
@andikrueger @hvdbrink