we have applied DLP policy its working fine but only issue when reply this message : From: Microsoft Outlook

how to change default : from Microsoft Outlook

Sent to scope Outside the organizatin
Add condition
Apply this rule if recipient is located outsit the organization
the message contains sensitive information 
Do the following 
Generate incident report and send it to salected group or DL its working fine,

when i received this notification from field show  From: Microsoft Outlook how can change it,

From: Microsoft Outlook how to change or customize From field and add any other reciepent or admin

Please suggest any way is possible or not ,

When i trace this message : sender id address  show <> 

 I think this is Sender Policy Framework (SPF) how change for DLP only,

• Edited by DBisht 18 hours 40 minutes ago update

Hi,

Based on my understanding, your problem is to change or customize the default From field: Microsoft Outlook in the notification messages. Right?

We can change the display name alone through ADSI edit. By default, the identity user should be MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e in exchange 2013. We can use this command to identity this user.

Get-OrganizationConfig | FL MicrosoftExchangeRecipientPrimarySmtpAddress

Here are steps:

1. Open ADSIEdit.msc
2. Configuration -> Services -> Microsoft Exchange -> Company Name -> Transport Settings
3. Right-click CN=MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e to properties.
4. Locate the display name attribute, it should be Microsoft Outlook, then change it to your Desired Display name in the notification messages.
5. Close ADSIEdit to test it.

Best Regards.