Create a Session Control Policy in MDCA
Mike Miller
33 steps
2 minutes
Microsoft
1
Navigate to [https://security.microsoft.com/homepage?tid=6e76e499-78fc-458a-96d3-be3ea1bdab87](https://security.microsoft.com/homepage?tid=6e76e499-78fc-458a-96d3-be3ea1bdab87)
2
Click "Policies"
3
Click "Policy management"
4
Click "Conditional access"
5
Click "Create policy"
6
Click "Session policy"
7
Click the templates drop-down to review the pre-built templates from Microsoft
8
Provide a policy name
9
Provide a description as desired
10
Choose your session control type
11
Click "Control file download (with inspection)"
12
Review the activities that were automatically selected to ensure they match your desired settings, or remove them and choose your own
13
Review the list of activities available
14
Choose between device tag or type
15
choose equals statement
16
Review the device tag options
17
You can scope this to a specific App for more granular controls
18
Click "Select apps"
19
Click "Microsoft SharePoint Online"
20
Drop-down Inspection method
21
Click "Data Classification Service"
22
Click "Choose inspection type..."
23
Click "Sensitive information type..."
24
Click the "Search..." field.
25
Search for and select your desired sensitive information type
26
Click "Done"
27
Click "Protect"
28
Drop-down the label options box
29
Click "Highly Confidential"
30
I recommend enabling the option to block download if the file type does not support native protections
31
Customize the block message as desired
32
Enable the option to always apply the selected actions if the data cannot be scanned
33
Click "Create"
Create a Session Control Policy in MDCA
Mike Miller
33 steps
2 minutes
Microsoft
1
Navigate to [https://security.microsoft.com/homepage?tid=6e76e499-78fc-458a-96d3-be3ea1bdab87](https://security.microsoft.com/homepage?tid=6e76e499-78fc-458a-96d3-be3ea1bdab87)
2
Click "Policies"
3
Click "Policy management"
4
Click "Conditional access"
5
Click "Create policy"
6
Click "Session policy"
7
Click the templates drop-down to review the pre-built templates from Microsoft
8
Provide a policy name
9
Provide a description as desired
10
Choose your session control type
11
Click "Control file download (with inspection)"
12
Review the activities that were automatically selected to ensure they match your desired settings, or remove them and choose your own
13
Review the list of activities available
14
Choose between device tag or type
15
choose equals statement
16
Review the device tag options
17
You can scope this to a specific App for more granular controls
18
Click "Select apps"
19
Click "Microsoft SharePoint Online"
20
Drop-down Inspection method
21
Click "Data Classification Service"
22
Click "Choose inspection type..."
23
Click "Sensitive information type..."
24
Click the "Search..." field.
25
Search for and select your desired sensitive information type
26
Click "Done"
27
Click "Protect"
28
Drop-down the label options box
29
Click "Highly Confidential"
30
I recommend enabling the option to block download if the file type does not support native protections
31
Customize the block message as desired
32
Enable the option to always apply the selected actions if the data cannot be scanned
33
Click "Create"
