[Email DLP] Release Procedure (Microsoft 365)

Overview

• This article explains how Email DLP administrators can remove the connection between Microsoft 365 and Email DLP.

Notes

1. The content of this article is based on product specifications as of September 2026 and may be changed without prior notice.
2. A Microsoft 365 Global Administrator account is required to perform this procedure.
3. For information on how to access the Email DLP management console, please refer to the following article.
   Accessing Method to Email DLP Management Console

Procedure

Removing Transport Rules / Connectors

1. Sign in to the Exchange admin center.
   https://admin.cloud.microsoft/exchange (External link)
2. From the left menu, open [Mail flow] - [Rule], and remove either "HENNGE Email DLP Rule" or "HDE One Misdelivery Prevention Rule."
   The registered name may differ from the names listed above depending on your environment.
   ※ If the Rule Name differs, select the applicable Rule Name to open its Details, confirm that the connector used in [Do the following] matches the connector name to be removed in step 3, and then remove it.
3. From the left menu of the Exchange admin center, open [Mail flow] - [Connectors], and remove either "HENNGE Email DLP" or "HDE One Misdelivery Prevention Connector."
   ※ If the connector name differs, confirm that the Hostname specified for the Email Routing Setup is mo.xxx.hdemail.jp or gwsmtp.mo.hdems.com.

Removing Enterprise Applications

1. Access the Microsoft Entra admin center.
   From the left menu of the Microsoft Entra admin center, access ［Enterprise applications］.
2. Select "HENNGE Email DLP" from the list.
3. From the left menu, select [Administrator] - [Properties].
4. Select [Discard] at the top of the Properties screen, then select [Yes].
5. Return to the screen in procedure 1, then select "HENNGE Email DLP Directory Sync" from the list.
   ※ This application does not exist in environments where [Email DLP] Group Sync with Microsoft Entra ID Settings has not been configured.
   In this case, procedures 7 and 8 are not required. Proceed to the subsequent removal of the SPF record.
6. From the left menu, select [Administrator] - [Properties].
7. Select [Discard] at the top of the Properties screen, then select [Yes].

Removing the SPF Record

Remove the Email DLP SPF record (bold text) added to the DNS server for the Domain in use.
Example)
Before the change
v=spf1 include:spf.protection.outlook.com include:xxx.hdemail.jp ~all 
or
v=spf1 include:spf.protection.outlook.com include:spf.mta.hdems.com ~all 

After the change
v=spf1 include:spf.protection.outlook.com ~all 

Deactivating DKIM

If DKIM has been configured in Email DLP, please follow the procedure below.

1. Access the Email DLP management screen and select [Tenant Settings] - [DKIM].

   

2. Under Active Selector Name, click [deactivate] for the enabled Selector.

   

3. Remove the TXT record corresponding to the deactivated Selector from the DNS server.
   ※ You can Confirm the value of the TXT record to be removed from [Tenant Settings] - [DKIM] in the Email DLP management screen.

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.