How to use specific local user in DLP rules

[Omriil]

we have a few DLP rules that block file copy by some classifications, and an exclusion for a specific domain user. We have a few machines that are not part of the domain and we wish to add an exclusion for a specific local user that exists on these machines- how is it possible to do so? We tried to create that local user entry on the 'User Directory' feature that basically belongs to DE, inside the DLP rule we can see User Directory and the users inside, but when we choose the user from that list nothing happens and the rule stays empty.

[Corey-DLP · Accepted solution]

Hello and thank you for posting here!

Unfortunately within DLP rules, local users cannot be specified. When the "local user" option is selected in a rule, this would apply to all local user accounts on a system. As you mentioned, User Directory would not apply here either since those user accounts are applied to the MDE Preboot Authentication File System (PBFS) and are not directly linked to a local Windows user account. 

I would recommend submitting a product idea for a feature to be added in a future version of DLP which would allow identification of local user accounts. KB60021 contains details on how to submit a product idea.