# Generated with Microsoft365DSC version 1.24.1113.1 # For additional information on how to use Microsoft365DSC, please visit https://aka.ms/M365DSC param ( [parameter(Mandatory)] [System.String] $PROTECTEDUsers, [parameter(Mandatory)] [System.String] $PROTECTEDGuests, [parameter(Mandatory)] [System.String] $PROTECTEDDomain ) Configuration M365TenantConfig { param ( [parameter()] [System.String] $PROTECTEDUsers, [parameter()] [System.String] $PROTECTEDGuests, [parameter(Mandatory)] [System.String] $PROTECTEDDomain ) $OrganizationName = $ConfigurationData.NonNodeData.OrganizationName Import-DscResource -ModuleName 'Microsoft365DSC' -ModuleVersion '1.24.1113.1' Node localhost { SCSensitivityLabel "SCSensitivityLabel-UNOFFICIAL" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '1d52abd8-3b0b-4086-b980-2773e8cb74bd' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "UNOFFICIAL"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "UNOFFICIAL"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "UNOFFICIAL"; EncryptionEnabled = $False; EncryptionProtectionType = "template"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'UNOFFICIAL' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'No damage. This information does not form part of official duty.' } ) } ); Name = "UNOFFICIAL"; Priority = 0; SiteAndGroupExternalSharingControlType = "ExternalUserSharingOnly"; SiteAndGroupProtectionAllowAccessToGuestUsers = $True; SiteAndGroupProtectionAllowEmailFromGuestUsers = $True; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $False; SiteAndGroupProtectionPrivacy = "public"; TenantId = $OrganizationName; Tooltip = "No damage. This information does not form part of official duty."; } SCSensitivityLabel "SCSensitivityLabel-OFFICIAL" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '1dd0ae65-76f6-4386-b99c-9920dbb7908d' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "OFFICIAL"; EncryptionEnabled = $False; EncryptionProtectionType = "template"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'OFFICIAL' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'No or insignificant impact. This is the majority of routine information.' } ) } ); Name = "OFFICIAL"; Priority = 1; TenantId = $OrganizationName; Tooltip = "No or insignificant impact. This is the majority of routine information."; } SCSensitivityLabel "SCSensitivityLabel-OFFICIAL Sensitive (group)" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'True' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $False; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $False; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup"); DisplayName = "OFFICIAL Sensitive (group)"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'OFFICIAL Sensitive (group)' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'OFFICIAL Sensitive Special Handling and Information Management Marker labels' } ) } ); Name = "OS group"; Priority = 2; TenantId = $OrganizationName; Tooltip = "OFFICIAL Sensitive Special Handling and Information Management Marker labels"; } SCSensitivityLabel "SCSensitivityLabel-OFFICIAL Sensitive" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '38e760bc-2178-4bef-bea0-91867171827c' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "OFFICIAL Sensitive"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'OFFICIAL Sensitive' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OFFICIAL Sensitive"; ParentId = "OS group"; Priority = 3; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-Personal Privacy" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '8d5d32c0-395c-4297-93f0-722c521b4e27' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive//Personal Privacy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive//Personal Privacy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Personal Privacy"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Personal Privacy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OS PP"; ParentId = "OS group"; Priority = 4; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-Legal Privilege" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'e4fdf381-87c9-42f4-93ea-2e23dc84d15c' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive//Legal Privilege"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive//Legal Privilege"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legal Privilege"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legal Privilege' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OS LP"; ParentId = "OS group"; Priority = 5; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-Legislative Secrecy" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '3aeaceaa-77f8-4b08-aca3-795356cb44ec' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive//Legislative Secrecy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive//Legislative Secrecy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legislative Secrecy"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legislative Secrecy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OS LS"; ParentId = "OS group"; Priority = 6; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-OFFICIAL Sensitive NATIONAL CABINET (group)" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'True' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup"); DisplayName = "OFFICIAL Sensitive NATIONAL CABINET (group)"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'OFFICIAL Sensitive NATIONAL CABINET (group)' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'OFFICIAL: Sensitive NATIONAL CABINET and Information Management Marker labels' } ) } ); Name = "OS NC group"; Priority = 7; TenantId = $OrganizationName; Tooltip = "OFFICIAL: Sensitive NATIONAL CABINET and Information Management Marker labels"; } SCSensitivityLabel "SCSensitivityLabel-OFFICIAL Sensitive NATIONAL CABINET" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '656538ea-769b-4560-a807-a9be7cdc3a04' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive//NATIONAL CABINET"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive//NATIONAL CABINET"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "OFFICIAL Sensitive NATIONAL CABINET"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'OFFICIAL Sensitive NATIONAL CABINET' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OS NC"; ParentId = "OS NC group"; Priority = 8; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-Personal Privacy-2" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'b5303cfe-1b63-4630-b32f-e4234e9760e5' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive//NATIONAL CABINET//Personal Privacy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive//NATIONAL CABINET//Personal Privacy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Personal Privacy"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Personal Privacy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OS NC PP"; ParentId = "OS NC group"; Priority = 9; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-Legal Privilege-2" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'c9740f1a-2d20-487d-9a2c-c8ea71420859' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive//NATIONAL CABINET//Legal Privilege"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive//NATIONAL CABINET//Legal Privilege"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legal Privilege"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legal Privilege' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OS NC LP"; ParentId = "OS NC group"; Priority = 10; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-Legislative Secrecy-2" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'b1fdb924-fab9-4eed-b38a-c7dbc41ec9f8' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "OFFICIAL: Sensitive//NATIONAL CABINET//Legislative Secrecy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "OFFICIAL: Sensitive//NATIONAL CABINET//Legislative Secrecy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legislative Secrecy"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legislative Secrecy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised.' } ) } ); Name = "OS NC LS"; ParentId = "OS NC group"; Priority = 11; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "Low to medium business impact. Limited damage to an individual, organisation or government generally if compromised."; } SCSensitivityLabel "SCSensitivityLabel-PROTECTED (group)" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'True' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup"); DisplayName = "PROTECTED (group)"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED (group)' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED Special Handling and Information Management Marker labels' } ) } ); Name = "P group"; Priority = 12; TenantId = $OrganizationName; Tooltip = "PROTECTED Special Handling and Information Management Marker labels"; } SCSensitivityLabel "SCSensitivityLabel-PROTECTED" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '821044d4-f8ad-4f88-8913-b18e4e7abd87' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "PROTECTED"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "PROTECTED"; ParentId = "P group"; Priority = 13; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Personal Privacy-3" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '81284764-792a-49da-b6c9-ee33f3b6217f' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//Personal Privacy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//Personal Privacy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Personal Privacy"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Personal Privacy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P PP"; ParentId = "P group"; Priority = 14; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Legal Privilege-3" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'fb6d27d8-6b7c-4dc6-9020-ed72f0413e73' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//Legal Privilege"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//Legal Privilege"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legal Privilege"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legal Privilege' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P LP"; ParentId = "P group"; Priority = 15; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Legislative Secrecy-3" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '6148f688-810a-4b49-9d5c-c747e44e1a89' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//Legislative Secrecy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//Legislative Secrecy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legislative Secrecy"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legislative Secrecy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P LS"; ParentId = "P group"; Priority = 16; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-PROTECTED NATIONAL CABINET (group)" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'True' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup"); DisplayName = "PROTECTED NATIONAL CABINET (group)"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED NATIONAL CABINET (group)' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED NATIONAL CABINET and Information Management Marker labels' } ) } ); Name = "P NC group"; Priority = 17; TenantId = $OrganizationName; Tooltip = "PROTECTED NATIONAL CABINET and Information Management Marker labels"; } SCSensitivityLabel "SCSensitivityLabel-PROTECTED NATIONAL CABINET" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '7cec8074-73bf-4e8e-8f28-900179e35e85' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//NATIONAL CABINET"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//NATIONAL CABINET"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "PROTECTED NATIONAL CABINET"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED NATIONAL CABINET' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P NC"; ParentId = "P NC group"; Priority = 18; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Personal Privacy-4" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'a194dd80-8a4d-4537-b82b-a64aa2cfda55' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//NATIONAL CABINET//Personal Privacy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//NATIONAL CABINET//Personal Privacy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Personal Privacy"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Personal Privacy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P NC PP"; ParentId = "P NC group"; Priority = 19; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Legal Privilege-4" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'beb93a88-0115-4856-aec5-51187f3ce8fd' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//NATIONAL CABINET//Legal Privilege"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//NATIONAL CABINET//Legal Privilege"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legal Privilege"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legal Privilege' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P NC LP"; ParentId = "P NC group"; Priority = 20; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Legislative Secrecy-4" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '902ac4d2-fd72-41a1-aeca-51eca6ae1727' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//NATIONAL CABINET//Legislative Secrecy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//NATIONAL CABINET//Legislative Secrecy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legislative Secrecy"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legislative Secrecy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P NC LS"; ParentId = "P NC group"; Priority = 21; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-PROTECTED CABINET (group)" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'True' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup"); DisplayName = "PROTECTED CABINET (group)"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED CABINET (group)' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED CABINET and Information Management Marker labels' } ) } ); Name = "P C group"; Priority = 22; TenantId = $OrganizationName; Tooltip = "PROTECTED CABINET and Information Management Marker labels"; } SCSensitivityLabel "SCSensitivityLabel-PROTECTED CABINET" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = 'd0dec329-adde-4b06-af3b-5cbbde67fb9d' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//CABINET"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//CABINET"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "PROTECTED CABINET"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'PROTECTED CABINET' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P C"; ParentId = "P C group"; Priority = 23; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Personal Privacy-5" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '29230e10-70d0-4edc-9660-90db488deac9' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//CABINET//Personal Privacy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//CABINET//Personal Privacy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Personal Privacy"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Personal Privacy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P C PP"; ParentId = "P C group"; Priority = 24; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Legal Privilege-5" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '7f07fc34-53e8-4c3d-b645-e63b995c4f75' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//CABINET//Legal Privilege"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//CABINET//Legal Privilege"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legal Privilege"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legal Privilege' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P C LP"; ParentId = "P C group"; Priority = 25; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCSensitivityLabel "SCSensitivityLabel-Legislative Secrecy-5" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'isparent' Value = 'False' } MSFT_SCLabelSetting { Key = 'defaultcontentlabel' Value = '27e7be77-056d-49a6-a691-3b7cd44f63c8' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplyContentMarkingFooterAlignment = "Center"; ApplyContentMarkingFooterEnabled = $True; ApplyContentMarkingFooterFontColor = "#FF0000"; ApplyContentMarkingFooterFontSize = "12"; ApplyContentMarkingFooterMargin = "5"; ApplyContentMarkingFooterText = "PROTECTED//CABINET//Legislative Secrecy"; ApplyContentMarkingHeaderAlignment = "Center"; ApplyContentMarkingHeaderEnabled = $True; ApplyContentMarkingHeaderFontColor = "#FF0000"; ApplyContentMarkingHeaderFontSize = "12"; ApplyContentMarkingHeaderMargin = "5"; ApplyContentMarkingHeaderText = "PROTECTED//CABINET//Legislative Secrecy"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentType = @("File, Email","Site, UnifiedGroup","Teamwork"); DisplayName = "Legislative Secrecy"; EncryptionContentExpiredOnDateInDaysOrNever = "Never"; EncryptionEnabled = $True; EncryptionOfflineAccessDays = "3"; EncryptionProtectionType = "template"; EncryptionRightsDefinitions = "$($PROTECTEDGuests):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDDomain):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER;$($PROTECTEDUsers):VIEW,VIEWRIGHTSDATA,DOCEDIT,EDIT,PRINT,EXTRACT,REPLY,REPLYALL,FORWARD,OBJMODEL,EDITRIGHTSDATA,EXPORT,OWNER"; Ensure = "Present"; LocaleSettings = @( MSFT_SCLabelLocaleSettings { LocaleKey = 'displayName' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'Legislative Secrecy' } ) } MSFT_SCLabelLocaleSettings { LocaleKey = 'tooltip' LabelSettings = @( MSFT_SCLabelSetting { Key = 'default' Value = 'High business impact. Damage to the national interest, organisations or individuals.' } ) } ); Name = "P C LS"; ParentId = "P C group"; Priority = 26; SiteAndGroupExternalSharingControlType = "Disabled"; SiteAndGroupProtectionAllowAccessToGuestUsers = $False; SiteAndGroupProtectionAllowEmailFromGuestUsers = $False; SiteAndGroupProtectionAllowFullAccess = $False; SiteAndGroupProtectionAllowLimitedAccess = $False; SiteAndGroupProtectionBlockAccess = $False; SiteAndGroupProtectionEnabled = $True; SiteAndGroupProtectionPrivacy = "private"; TenantId = $OrganizationName; Tooltip = "High business impact. Damage to the national interest, organisations or individuals."; } SCLabelPolicy "SCLabelPolicy-Users up to OFFICIAL Sensitive" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'mandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'attachmentaction' Value = 'recommended' } MSFT_SCLabelSetting { Key = 'outlookdefaultlabel' Value = 'None' } MSFT_SCLabelSetting { Key = 'requiredowngradejustification' Value = 'true' } MSFT_SCLabelSetting { Key = 'powerbimandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'siteandgroupmandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'teamworkmandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'disablemandatoryinoutlook' Value = 'false' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Publishes labels for use with content up to OFFICIAL: Sensitive to all users"; Ensure = "Present"; ExchangeLocation = "All"; Labels = @("OS NC","OS PP","OFFICIAL Sensitive","OFFICIAL","OS LP","UNOFFICIAL","OS NC LS","OS NC PP","OS LS","OS group","OS NC LP","OS NC group"); Name = "Users up to OFFICIAL Sensitive"; TenantId = $OrganizationName; } SCLabelPolicy "SCLabelPolicy-Users up to PROTECTED" { AdvancedSettings = @( MSFT_SCLabelSetting { Key = 'mandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'attachmentaction' Value = 'recommended' } MSFT_SCLabelSetting { Key = 'outlookdefaultlabel' Value = 'None' } MSFT_SCLabelSetting { Key = 'requiredowngradejustification' Value = 'true' } MSFT_SCLabelSetting { Key = 'powerbimandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'siteandgroupmandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'teamworkmandatory' Value = 'true' } MSFT_SCLabelSetting { Key = 'disablemandatoryinoutlook' Value = 'false' } ); ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Publishes labels for use with content up to PROTECTED to authorised users"; Ensure = "Present"; ExchangeLocation = "All"; Labels = @("P NC LS","P PP","P C LP","P NC group","P C","PROTECTED","P NC LP","P C PP","P NC PP","P LP","P C LS","P NC","P LS","P C group","P group"); Name = "Users up to PROTECTED"; TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming UNOFFICIAL email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "UNOFFICIAL"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the UNOFFICIAL label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming UNOFFICIAL email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 0; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OFFICIAL"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 1; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OFFICIAL Sensitive"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 2; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive Personal Privacy email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OS PP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive Personal Privacy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive Personal Privacy email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 3; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive Legal Privilege email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OS LP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive Legal Privilege label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive Legal Privilege email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 4; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive Legislative Secrecy email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OS LS"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive Legislative Secrecy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive Legislative Secrecy email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 5; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive NATIONAL CABINET email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OS NC"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive NATIONAL CABINET label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive NATIONAL CABINET email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 6; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive NATIONAL CABINET PP email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OS NC PP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive NATIONAL CABINET Personal Privacy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive NATIONAL CABINET PP email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 7; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive NATIONAL CABINET LP email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OS NC LP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive NATIONAL CABINET Legal Privilege label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive NATIONAL CABINET LP email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 8; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming OFFICIAL: Sensitive NATIONAL CABINET LS email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "OS NC LS"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the OFFICIAL: Sensitive NATIONAL CABINET Legislative Secrecy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming OFFICIAL: Sensitive NATIONAL CABINET LS email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 9; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "PROTECTED"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 10; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED Personal Privacy email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P PP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED Personal Privacy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED Personal Privacy email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 11; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED Legal Privilege email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P LP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED Legal Privilege label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED Legal Privilege email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 12; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED Legislative Secrecy email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P LS"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED Legislative Secrecy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED Legislative Secrecy email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 13; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED NATIONAL CABINET email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P NC"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED NATIONAL CABINET label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED NATIONAL CABINET email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 14; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED NATIONAL CABINET PP email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P NC PP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED NATIONAL CABINET Personal Privacy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED NATIONAL CABINET PP email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 15; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED NATIONAL CABINET LP email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P NC LP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED NATIONAL CABINET Legal Privilege label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED NATIONAL CABINET LP email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 16; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED NATIONAL CABINET LS email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P NC LS"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED NATIONAL CABINET Legislative Secrecy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED NATIONAL CABINET LS email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 17; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED CABINET email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P C"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED CABINET label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED CABINET email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 18; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED CABINET Personal Privacy email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P C PP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED CABINET Personal Privacy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED CABINET Personal Privacy email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 19; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED CABINET Legal Privilege email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P C LP"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED CABINET Legal Privilege label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED CABINET Legal Privilege email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 20; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCAutoSensitivityLabelPolicy "SCAutoSensitivityLabelPolicy-Label incoming PROTECTED CABINET Legislative Secrecy email" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; ApplySensitivityLabel = "P C LS"; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Applies the PROTECTED CABINET Legislative Secrecy label to incoming emails based on either the header or the subject"; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeSender = @(); ExchangeSenderException = @(); ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithoutNotifications"; Name = "Label incoming PROTECTED CABINET Legislative Secrecy email"; OneDriveLocation = @(); OneDriveLocationException = @(); #Priority = 21; SharePointLocation = @(); SharePointLocationException = @(); TenantId = $OrganizationName; } SCDLPCompliancePolicy "SCDLPCompliancePolicy-Block SECRET and TOP SECRET emails" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Block emails with SECRET or TOP SECRET X-Protective-Marking X-header or email subject"; EndpointDlpLocationException = @(); Ensure = "Present"; ExchangeLocation = "All"; ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "Enable"; Name = "Block SECRET and TOP SECRET emails"; OneDriveLocationException = @(); OnPremisesScannerDlpLocationException = @(); PowerBIDlpLocationException = @(); Priority = 0; SharePointLocationException = @(); TeamsLocationException = @(); TenantId = $OrganizationName; ThirdPartyAppDlpLocationException = @(); } SCDLPCompliancePolicy "SCDLPCompliancePolicy-Add PSPF X-header and subject marking" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Apply PSPF markings to the email X-Protective-Marking X-header and email subject"; EndpointDlpLocationException = @(); Ensure = "Present"; ExchangeLocation = "All"; ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithNotifications"; Name = "Add PSPF X-Header and Subject Marking"; OneDriveLocationException = @(); OnPremisesScannerDlpLocationException = @(); PowerBIDlpLocationException = @(); Priority = 1; SharePointLocationException = @(); TeamsLocationException = @(); TenantId = $OrganizationName; ThirdPartyAppDlpLocationException = @(); } SCDLPCompliancePolicy "SCDLPCompliancePolicy-Block PROTECTED emails except for approved domains" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Block emails with PROTECTED labels (including SH and IMM variants) if either the sending or the receiving domain has not been explicitly allowed"; EndpointDlpLocationException = @(); Ensure = "Present"; ExchangeLocation = "All"; ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithNotifications"; Name = "Block PROTECTED emails except for approved domains"; OneDriveLocationException = @(); OnPremisesScannerDlpLocationException = @(); PowerBIDlpLocationException = @(); Priority = 2; SharePointLocationException = @(); TeamsLocationException = @(); TenantId = $OrganizationName; ThirdPartyAppDlpLocationException = @(); } SCDLPCompliancePolicy "SCDLPCompliancePolicy-Block PROTECTED emails except for approved users" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Block emails with PROTECTED labels (including SH and IMM variants) if either the sender or receiver is an internal user that has not been explicitly allowed"; EndpointDlpLocationException = @(); Ensure = "Present"; ExchangeLocation = "All"; ExchangeSenderMemberOf = @(); ExchangeSenderMemberOfException = @(); Mode = "TestWithNotifications"; Name = "Block PROTECTED emails except for approved users"; OneDriveLocationException = @(); OnPremisesScannerDlpLocationException = @(); PowerBIDlpLocationException = @(); Priority = 3; SharePointLocationException = @(); TeamsLocationException = @(); TenantId = $OrganizationName; ThirdPartyAppDlpLocationException = @(); } SCRetentionCompliancePolicy "SCRetentionCompliancePolicy-OneDrive accounts 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Retains all information stored within OneDrive accounts for 7 years"; DynamicScopeLocation = @(); Enabled = $False; Ensure = "Present"; ExchangeLocation = @(); ExchangeLocationException = @(); ModernGroupLocation = @(); ModernGroupLocationException = @(); Name = "OneDrive accounts 7 year hold"; OneDriveLocation = @("All"); OneDriveLocationException = @(); PublicFolderLocation = @(); RestrictiveRetention = $False; SharePointLocation = @(); SharePointLocationException = @(); SkypeLocation = @(); SkypeLocationException = @(); TenantId = $OrganizationName; } SCRetentionCompliancePolicy "SCRetentionCompliancePolicy-Teams channel messages 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; Enabled = $False; Ensure = "Present"; Name = "Teams channel messages 7 year hold"; RestrictiveRetention = $False; TeamsChannelLocation = @("All"); TeamsChannelLocationException = @(); TeamsChatLocation = @(); TeamsChatLocationException = @(); TenantId = $OrganizationName; } SCRetentionCompliancePolicy "SCRetentionCompliancePolicy-Exchange public folders 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Retains all information stored within Exchange public folders for 7 years"; DynamicScopeLocation = @(); Enabled = $False; Ensure = "Present"; ExchangeLocation = @(); ExchangeLocationException = @(); ModernGroupLocation = @(); ModernGroupLocationException = @(); Name = "Exchange public folders 7 year hold"; OneDriveLocation = @(); OneDriveLocationException = @(); PublicFolderLocation = @("All"); RestrictiveRetention = $False; SharePointLocation = @(); SharePointLocationException = @(); SkypeLocation = @(); SkypeLocationException = @(); TenantId = $OrganizationName; } SCRetentionCompliancePolicy "SCRetentionCompliancePolicy-Microsoft 365 Group mailboxes & sites 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Retains all information stored within Microsoft 365 Group mailboxes & sites for 7 years"; DynamicScopeLocation = @(); Enabled = $False; Ensure = "Present"; ExchangeLocation = @(); ExchangeLocationException = @(); ModernGroupLocation = @("All"); ModernGroupLocationException = @(); Name = "Microsoft 365 Group mailboxes & sites 7 year hold"; OneDriveLocation = @(); OneDriveLocationException = @(); PublicFolderLocation = @(); RestrictiveRetention = $False; SharePointLocation = @(); SharePointLocationException = @(); SkypeLocation = @(); SkypeLocationException = @(); TenantId = $OrganizationName; } SCRetentionCompliancePolicy "SCRetentionCompliancePolicy-Exchange mailboxes 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Retains all information stored within Exchange mailboxes for 7 years"; DynamicScopeLocation = @(); Enabled = $False; Ensure = "Present"; ExchangeLocation = @("All"); ExchangeLocationException = @(); ModernGroupLocation = @(); ModernGroupLocationException = @(); Name = "Exchange mailboxes 7 year hold"; OneDriveLocation = @(); OneDriveLocationException = @(); PublicFolderLocation = @(); RestrictiveRetention = $False; SharePointLocation = @(); SharePointLocationException = @(); SkypeLocation = @(); SkypeLocationException = @(); TenantId = $OrganizationName; } SCRetentionCompliancePolicy "SCRetentionCompliancePolicy-Sharepoint classic 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = "Retains all information stored within SharePoint classic and communication sites for 7 years"; DynamicScopeLocation = @(); Enabled = $False; Ensure = "Present"; ExchangeLocation = @(); ExchangeLocationException = @(); ModernGroupLocation = @(); ModernGroupLocationException = @(); Name = "Sharepoint classic 7 year hold"; OneDriveLocation = @(); OneDriveLocationException = @(); PublicFolderLocation = @(); RestrictiveRetention = $False; SharePointLocation = @("All"); SharePointLocationException = @(); SkypeLocation = @(); SkypeLocationException = @(); TenantId = $OrganizationName; } SCRetentionCompliancePolicy "SCRetentionCompliancePolicy-Teams chats and Copilot interactions 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; Enabled = $False; Ensure = "Present"; Name = "Teams chats and Copilot interactions 7 year hold"; RestrictiveRetention = $False; TeamsChannelLocation = @(); TeamsChannelLocationException = @(); TeamsChatLocation = @("All"); TeamsChatLocationException = @(); TenantId = $OrganizationName; } SCRetentionComplianceRule "SCRetentionComplianceRule-OneDrive accounts 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentMatchQuery = ""; Ensure = "Present"; ExcludedItemClasses = @(); ExpirationDateOption = "ModificationAgeInDays"; Name = "OneDrive accounts 7 year hold"; Policy = "OneDrive accounts 7 year hold"; RetentionComplianceAction = "Keep"; RetentionDuration = "2555"; RetentionDurationDisplayHint = "Days"; TenantId = $OrganizationName; } SCRetentionComplianceRule "SCRetentionComplianceRule-Teams channel messages 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; Ensure = "Present"; ExpirationDateOption = "CreationAgeInDays"; Name = "Teams channel messages 7 year hold"; Policy = "Teams channel messages 7 year hold"; RetentionComplianceAction = "Keep"; RetentionDuration = "2555"; RetentionDurationDisplayHint = "Days"; TenantId = $OrganizationName; } SCRetentionComplianceRule "SCRetentionComplianceRule-Exchange public folders 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentMatchQuery = ""; Ensure = "Present"; ExcludedItemClasses = @(); ExpirationDateOption = "ModificationAgeInDays"; Name = "Exchange public folders 7 year hold"; Policy = "Exchange public folders 7 year hold"; RetentionComplianceAction = "Keep"; RetentionDuration = "2555"; RetentionDurationDisplayHint = "Days"; TenantId = $OrganizationName; } SCRetentionComplianceRule "SCRetentionComplianceRule-Microsoft 365 Group mailboxes & sites 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentMatchQuery = ""; Ensure = "Present"; ExcludedItemClasses = @(); ExpirationDateOption = "ModificationAgeInDays"; Name = "Microsoft 365 Group mailboxes & sites 7 year hold"; Policy = "Microsoft 365 Group mailboxes & sites 7 year hold"; RetentionComplianceAction = "Keep"; RetentionDuration = "2555"; RetentionDurationDisplayHint = "Days"; TenantId = $OrganizationName; } SCRetentionComplianceRule "SCRetentionComplianceRule-Exchange mailboxes 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentMatchQuery = ""; Ensure = "Present"; ExcludedItemClasses = @(); ExpirationDateOption = "ModificationAgeInDays"; Name = "Exchange mailboxes 7 year hold"; Policy = "Exchange mailboxes 7 year hold"; RetentionComplianceAction = "Keep"; RetentionDuration = "2555"; RetentionDurationDisplayHint = "Days"; TenantId = $OrganizationName; } SCRetentionComplianceRule "SCRetentionComplianceRule-Sharepoint classic 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; ContentMatchQuery = ""; Ensure = "Present"; ExcludedItemClasses = @(); ExpirationDateOption = "ModificationAgeInDays"; Name = "Sharepoint classic 7 year hold"; Policy = "Sharepoint classic 7 year hold"; RetentionComplianceAction = "Keep"; RetentionDuration = "2555"; RetentionDurationDisplayHint = "Days"; TenantId = $OrganizationName; } SCRetentionComplianceRule "SCRetentionComplianceRule-Teams chats and Copilot interactions 7 year hold" { ApplicationId = $ConfigurationData.NonNodeData.ApplicationId; CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint; Comment = ""; Ensure = "Present"; ExpirationDateOption = "CreationAgeInDays"; Name = "Teams chats and Copilot interactions 7 year hold"; Policy = "Teams chats and Copilot interactions 7 year hold"; RetentionComplianceAction = "Keep"; RetentionDuration = "2555"; RetentionDurationDisplayHint = "Days"; TenantId = $OrganizationName; } } } M365TenantConfig -ConfigurationData .\ConfigurationData.psd1 -PROTECTEDUsers $PROTECTEDUsers -PROTECTEDGuests $PROTECTEDGuests -PROTECTEDDomain $PROTECTEDDomain