Відео

Thanks for the patience, nevertheless, you can always find MPARR through any search engine using MPARR as a key. Here is the link github.com/microsoft/Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector And here another version for quick scan www.linkedin.com/posts/profesorkaz_microsoft365-m365-mparr-activity-7215129680960438272--fTs

Normally, to avoid that kind of behavior, when you share with organizations that are completely on-premises or use 3rd party Office solutions. The best solution that I find it is implement OTP and disable Social Sign-in, that is at OME configuration. That forces to end users connect to a captive web portal and see all the information there, that include protected attachments.

Can you validate if at least the scripts "MPARR-GetRMSData.ps1" and "MPARR-GetTrackingRMSData.ps1" are avaialble under the "ConfigFiles" folder? Additionally, more if you are using Windows Server, is recommended to sign the scripts.

@@kazdemos should we be running these scripts or what ?

Those scripts are called in background, happens that the RMS API doesn't support with PowerShell 7, for that same reason the main script MPARR_RMSData call the other 2 scripts running it using PowerShell 5 to call that API.

MPARR creates the tables when certain information is collected, in this case only if you have some DLP rule matches that table will get info and the table will be created.

@@kazdemos the issue is if no information in tenant and the table doesn’t create the template still looks for it then errors ?

Please open an issue through GitHub page to have the capability to share images.

Hi @samv5876 can you please extend in your requirements. In another session I explained how to build Power BI reports from scratch, you can see here ua-cam.com/video/sSbyTf4UXVU/v-deo.html

Hi Kaz, are you contactable via teams by chance ?

@@samv5876 you can find me on LinkedIn LinkedIn.com/in/profesorkaz

@@kazdemos got an error message with entra users i cant run the script on my demo tenant its fine but on a production environment it fails

Can you please open an issue under GitHub page to share a screenshot about the error.

Was a pleasure for me.

Thanks for the feedback, I´m sharing your message with Nabil.

@@kazdemos Also eagerly looking forward to your session on Endpoint DLP and other topics such as Data Lifecycle Management, Insider Risk Management, Communication Compliance, eDiscovery and Information Barriers. Your demos and from the field notes are gold mines!!!

Thank you for the feedback ! We will prepare something accordingly 👌🏼

Thanks for your feedback, much appreciated.

Thanks! 👍

I´m not totally clear with that name, nevertheless, if you can extend I can try to do my best to see if I have that with another name.

​@@kazdemos in 1:33.33 time in the video you open a dlp test form. for testing the DLP SIT.

On the same video at the begins I explain how to get that tool, it's a PowerShell module, you can install using: Install-Module -Name InformationProtectionHarness.PowershellGalleryModule Then you can call that PowerShell module in this way: Initialize-DlpHarness -Verbose The script will be required your credentials at least as a Compliance Administrator to connect.

@@kazdemos thanks 🙏

Thanks for the patience, let me share during this week some information that can be helpful in the same GitHub site. Are some easy ways to start understanding logs and how to use it.

Thanks for the patience please check this link github.com/microsoft/Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector/blob/main/Kusto%20Queries/HowToUseMPARRLogs.md

@@kazdemos sorry to bother you I need to filter logs before download to log analytics like there are multiple logs which I don’t want to be downloaded or export to log analytic to save costing and space

Please check this new documentation github.com/microsoft/Microsoft-Purview-Advanced-Rich-Reports-MPARR-Collector/blob/main/About%20MPARR/How%20to%20filter%20activities%20with%20MPARR.md

I'll add some additional information to share, next week for sure

@@kazdemos have you had a chance to upload them somewhere?

@@dlgross1 Hi Dean, let me check what can I find? I know that I was sharing past week the diagrams used in this session.

Thanks

Please open an issue or comment on the MPARR GitHub page to share some screenshots and follow this point with more details

Please contact me through GitHub to share a screenshot with the error. Https://aka.ms/MPARR-GitHub

@@kazdemos Hi, thank you. I have posted in the Discussion "Error installing MPARR #61". Please, let me know if you can see it.

1drv.ms/x/s!ApnygQKLKvF_qLEGobKMK95KCkK74g?e=81StzA done

@@kazdemos Thanks Kaz for prompt response.. is this the Microsoft official calculator or created by some third party ?

@@donniedarko4801 was created for the Product Group as a reference, are too many variables, nevertheless helps to have an idea.

@@kazdemos Thanks Mate

Yes, any time, you can contact me through LinkedIn

Thanks for the feedback, you can register to another session that we will do on May 16 you can register at aka.ms/KD-Events is about sensitivity labels

My pleasure.

Thanks we really appreciate your feedback.

If you want to be aware about new webinars, you can subscribe adding your email to this form forms.microsoft.com/r/Ma6rQbmhsU

When the reports are created exist a way to anonymize all the data, in that order of ideas and additional step will be required to accomplish that requirement.

Glad to share, thanks for the feedback.

Please contact me through the GitHub portal to see your case, you are the first with problems to implement.

I really appreciate that you liked

Are the original queries used to build the functions, I'll release soon a video explaining part of that.

When you use the MPARR application capturing the data, to consume from Power BI, not admin roles are needed. Exist 2 scripts that need elevated privileges to be executed, that permissions can be added to the Microsoft Entra App directly, or you need someone with Compliance Administrator role to execute those scripts, MPARR-LabelData.ps1 and MPARR-SITData.ps1. I'll share less privileges that can be used to execute those scripts.

Thanks and please share your experience.

Thanks

I'll check, thanks for letting me know.

Please check again, I just tested in another machine and is working fine 1drv.ms/b/s!ApnygQKLKvF_qKlGr1D8Eh2eZUIORw?e=SddinU

@@kazdemos, yes that link works. Its cutoff in the original description. Which Dynamics? CRM, BC, or F&O?

The old AIP Scanner was sending the data directly to Logs Analytics, that was deprecated, with MPARR we are taking the data from the Office 365 Management API where the data is located now, and we are sending back to Logs Analytics workspace.

@@kazdemos I just saw your GitHub repository. Thank you for that. Clients always complain about Scanner reports. Activity Explorer isn’t sufficient to show data owners about their data. I’m in a project where we have been importing the CSVs into PowerBI due to Activity Explorer does not show the last modified date for a Scanner file discovered. I will implement MPARR in my Dev Tenant. I’m excited about ingest the Log Analytics back again.

@@RenanBlancoLopes MPARR can works for you and simplify that activity

You can follow up at LinkedIn, aka.ms/MPARR-LinkedIn all the news are published there.