I am using Device Control. I am planning to have both computer based policy enforcement and AD object based enforcement.
Consider a laptop is enforced with "Block Rule" under computer DLP policies. And a user who has a "monitor policy" in Data Protection -> DLP Policy (USer Assignment Group). My query is which policy will get enforced.
I would like to know the rule priority - "User Assignment Group" or the "Computer Assignment"
Block rules will take priority. but usually block items will be monitored too. unless you had excluded it as you do not need to generate reports from it.
I do not think which rules take priority.