[Email DLP] Release Procedure (Microsoft 365)

Overview

• This article describes the procedure for disconnecting Microsoft 365 from Email DLP for Email DLP administrators.

Notes

1. The content of this article is based on product specifications as of September 2026 and may be changed without prior notice.
2. A Microsoft 365 Global Administrator account is required to perform this procedure.
3. For information on how to access the Email DLP management screen, please refer to the following article.
   Accessing Method to Email DLP Management Console

Procedure

Removing Transport Rules / Connectors

1. Sign in to the Exchange admin center.
   https://admin.cloud.microsoft/exchange (External link)
2. From the left-hand menu, open [Mail flow] - [Rules], then Remove either "HENNGE Email DLP Rule" or "HDE One Misdelivery Prevention Rule."
   The registered name may differ from the names above depending on your environment.
   ※ If the Rule Name differs, select the applicable Rule Name to open its Details, confirm that the connector used in [Do the following] matches the connector name to be removed in subsequent step 3, and then Remove the rule.
3. From the left-hand menu in the Exchange admin center, open [Mail flow] - [Connectors], then Remove either "HENNGE Email DLP" or "HDE One Misdelivery Prevention Connector."
   ※ If the connector name differs, confirm that the Hostname specified in Email Routing Setup is mo.xxx.hdemail.jp or gwsmtp.mo.hdems.com.

Discarding Enterprise Applications

1. Access the Microsoft Entra admin center.
   From the left-hand menu in the Microsoft Entra admin center, access ［Enterprise applications］.
2. Select "HENNGE Email DLP" from the list.
3. From the left-hand menu, select [Manage] - [Properties].
4. Select [Discard] at the top of the Properties screen, then select [Yes].
5. Return to the screen in step 1, then select "HENNGE Email DLP Directory Sync" from the list.
   ※ This application does not exist in environments where [Email DLP] Group Sync with Microsoft Entra ID Settings has not been configured.
   In this case, steps 7 and 8 below are not required. Proceed to the subsequent section, Discarding SPF Records.
6. From the left-hand menu, select [Manage] - [Properties].
7. Select [Discard] at the top of the Properties screen, then select [Yes].

Discarding SPF Records

Discard the Email DLP SPF record (bolded portion) added to the DNS server for the Domain in use.
Example)
Before change
v=spf1 include:spf.protection.outlook.com include:xxx.hdemail.jp ~all 
or
v=spf1 include:spf.protection.outlook.com include:spf.mta.hdems.com ~all 

After change
v=spf1 include:spf.protection.outlook.com ~all 

Deactivating DKIM

If DKIM has been configured in Email DLP, please follow the procedure below.

1. Access the Email DLP management screen and select [Tenant Settings] - [DKIM].

   

2. Under Active Selector Name, click [deactivate] for the enabled Selector.

   

3. Remove the TXT record corresponding to the Selector for which you clicked [deactivate] from the DNS server.
   ※ The value of the TXT record to be removed can be confirmed in the Email DLP management screen under [Tenant Settings] - [DKIM].

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.