Commands › Exchange Online
New-DlpFingerprint
For more information, see Security & Compliance PowerShell. Use the New-DlpFingerprint cmdlet to create document fingerprints that are used with data loss prevention (DLP) sensitive information types in the Microsoft Purview compliance portal. Because the results of New-DlpFingerprint aren't stored outside of the sensitive information type, you always run New-DlpFingerprint and New-DlpSensitiveInformationType or Set-DlpSensitiveInformationType in the same PowerShell session.
Quick start script
# New-DlpFingerprint — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org
# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-DlpFingerprint
$before | Format-List
# 3. Make the change (dry run first)
New-DlpFingerprint -Description <String> -WhatIf
New-DlpFingerprint -Description <String>
# 4. Verify and diff
$after = Get-DlpFingerprint
Compare-Object ($before | Out-String) ($after | Out-String)
Syntax
New-DlpFingerprint [[-FileData] <Byte[]>] -Description <String>
[-IsExact <Boolean>]
[-Confirm]
[-ThresholdConfig <PswsHashtable>]
[-WhatIf]
[<CommonParameters>]
Parameters (6)
Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.