Regaining Control Over Unmanaged GenAI Apps: New Microsoft Purview Enhancements in Edge

Many organizations are growing increasingly concerned about the widespread use of unsanctioned Generative AI (GenAI) tools. These apps, often accessed through unmanaged browsers, pose significant risks to data security and compliance. To help with this, Microsoft is now updating some features in  Microsoft Purview that will enhance policy enforcement for unmanaged cloud apps accessed via the Edge browser.  What’s Changing? Previously, enforcing Purview Data Loss Prevention (DLP) and Collection policies required manual creation of Edge configuration policies. These policies were often complex and needed to be scoped correctly to block unsupported browsers or apply protections. With this update, Microsoft automates much of that process: Collection Policies now apply directly within Edge without needing a separate blocking configuration. DLP Policies automatically generate Edge configuration policies that align with the scope of the DLP rules. DLP policies can operate in two mode...

Installing OCS 2007 R2 on Windows 2008 R2

#OCS #WindowsServer #Powershell

Here is a tip for if you want to speed up the process of installing OCS on a Windows 2008 R2 server.

The installation wizard and guide is made for previous OS's, and is not capable of detecting or installing all of the features you need (.net framework beeing one of them). Also, I realized all the tech blogs I came across on google suggested to use the servermanagercmd.exe to add some of the prerequisites. servermanagercmd is depreciated, and I suggest you use Powershell in Windows 2008 R2.

So, before even thinking of starting the OCS setup, you should concider running the following commands in powershell (as administrator):

import-module servermanager
web-windows-auth,web-mgmt-compat,web-mgmt-console,web-http-logging,msmq-server,msmq-directory,rsat-addc,was-process-model,was-config-apis,NET-Framework-Core,Desktop-Experience -restart

So far, so good, but now I,m stuck with a new error: 0x80070534 "No mapping betweein account names and security IDs was done. This error is registered on the "setting NTFS rights" section in the error report. Anyone got an Idea?