Get Transport Rule

Gets information about a transport rule in an Exchange Online organization.

Installed version: 3.5.0

Parameters

Parameter	Description
Rule Name	Name of the existing transport rule to lookup.

Example Output

{
    "Priority": 0,
    "DlpPolicy": null,
    "DlpPolicyId": "00000000-0000-0000-0000-000000000000",
    "Comments": null,
    "CreatedBy": "User",
    "LastModifiedBy": "Microsoft Exchange",
    "ManuallyModified": false,
    "ActivationDate": null,
    "ExpiryDate": null,
    "Description": "If the message:\r\n\tsender's address domain portion belongs to any of these domains: 'blinkops.com' or 'example.com'\r\nTake the following actions:\r\n\tSet audit severity level to 'Low'\r\n\tand Prepend the message with the disclaimer 'this is from example.com!'. If the disclaimer can't be applied, take no action.\r\nExcept if the message:\r\n\tsender's address domain portion belongs to any of these domains: 'blinkops.com' or 'gmail.com' or 'random.com' or 'random.com' or 'random.com' or 'random2.com' or 'random12.com' or 'help.com' or 'shouldwork.com' or 'random1234.com'\r\n",
    "RuleVersion": {
        "Major": 15,
        "Minor": 0,
        "Build": 5,
        "Revision": 2,
        "MajorRevision": 0,
        "MinorRevision": 2
    },
    "Size": 815,
    "Conditions": [
        "Microsoft.Exchange.MessagingPolicies.Rules.Tasks.SenderDomainIsPredicate"
    ],
    "Exceptions": [
        "Microsoft.Exchange.MessagingPolicies.Rules.Tasks.SenderDomainIsPredicate"
    ],
    "Actions": [
        "Microsoft.Exchange.MessagingPolicies.Rules.Tasks.SetAuditSeverityAction",
        "Microsoft.Exchange.MessagingPolicies.Rules.Tasks.ApplyHtmlDisclaimerAction"
    ],
    "State": "Disabled",
    "Mode": "Enforce",
    "RuleErrorAction": "Ignore",
    "SenderAddressLocation": "Header",
    "RecipientAddressType": "Resolved",
    "RuleSubType": "None",
    "RegexSize": 0,
    "UseLegacyRegex": false,
    "From": null,
    "FromMemberOf": null,
    "FromScope": null,
    "SentTo": null,
    "SentToMemberOf": null,
    "SentToScope": null,
    "BetweenMemberOf1": null,
    "BetweenMemberOf2": null,
    "ManagerAddresses": null,
    "ManagerForEvaluatedUser": null,
    "SenderManagementRelationship": null,
    "ADComparisonAttribute": null,
    "ADComparisonOperator": null,
    "SenderADAttributeContainsWords": null,
    "SenderADAttributeMatchesPatterns": null,
    "RecipientADAttributeContainsWords": null,
    "RecipientADAttributeMatchesPatterns": null,
    "AnyOfToHeader": null,
    "AnyOfToHeaderMemberOf": null,
    "AnyOfCcHeader": null,
    "AnyOfCcHeaderMemberOf": null,
    "AnyOfToCcHeader": null,
    "AnyOfToCcHeaderMemberOf": null,
    "HasClassification": null,
    "HasNoClassification": false,
    "SubjectContainsWords": null,
    "SubjectOrBodyContainsWords": null,
    "HeaderContainsMessageHeader": null,
    "HeaderContainsWords": null,
    "FromAddressContainsWords": null,
    "SenderDomainIs": [
        "blinkops.com",
        "example.com"
    ],
    "RecipientDomainIs": null,
    "SubjectMatchesPatterns": null,
    "SubjectOrBodyMatchesPatterns": null,
    "HeaderMatchesMessageHeader": null,
    "HeaderMatchesPatterns": null,
    "FromAddressMatchesPatterns": null,
    "AttachmentNameMatchesPatterns": null,
    "AttachmentExtensionMatchesWords": null,
    "AttachmentPropertyContainsWords": null,
    "ContentCharacterSetContainsWords": null,
    "HasSenderOverride": false,
    "MessageContainsDataClassifications": null,
    "MessageContainsAllDataClassifications": null,
    "SenderIpRanges": null,
    "SCLOver": null,
    "AttachmentSizeOver": null,
    "MessageSizeOver": null,
    "WithImportance": null,
    "MessageTypeMatches": null,
    "RecipientAddressContainsWords": null,
    "RecipientAddressMatchesPatterns": null,
    "SenderInRecipientList": null,
    "RecipientInSenderList": null,
    "AttachmentContainsWords": null,
    "AttachmentMatchesPatterns": null,
    "AttachmentIsUnsupported": false,
    "AttachmentProcessingLimitExceeded": false,
    "AttachmentHasExecutableContent": false,
    "AttachmentIsPasswordProtected": false,
    "AnyOfRecipientAddressContainsWords": null,
    "AnyOfRecipientAddressMatchesPatterns": null,
    "ExceptIfFrom": null,
    "ExceptIfFromMemberOf": null,
    "ExceptIfFromScope": null,
    "ExceptIfSentTo": null,
    "ExceptIfSentToMemberOf": null,
    "ExceptIfSentToScope": null,
    "ExceptIfBetweenMemberOf1": null,
    "ExceptIfBetweenMemberOf2": null,
    "ExceptIfManagerAddresses": null,
    "ExceptIfManagerForEvaluatedUser": null,
    "ExceptIfSenderManagementRelationship": null,
    "ExceptIfADComparisonAttribute": null,
    "ExceptIfADComparisonOperator": null,
    "ExceptIfSenderADAttributeContainsWords": null,
    "ExceptIfSenderADAttributeMatchesPatterns": null,
    "ExceptIfRecipientADAttributeContainsWords": null,
    "ExceptIfRecipientADAttributeMatchesPatterns": null,
    "ExceptIfAnyOfToHeader": null,
    "ExceptIfAnyOfToHeaderMemberOf": null,
    "ExceptIfAnyOfCcHeader": null,
    "ExceptIfAnyOfCcHeaderMemberOf": null,
    "ExceptIfAnyOfToCcHeader": null,
    "ExceptIfAnyOfToCcHeaderMemberOf": null,
    "ExceptIfHasClassification": null,
    "ExceptIfHasNoClassification": false,
    "ExceptIfSubjectContainsWords": null,
    "ExceptIfSubjectOrBodyContainsWords": null,
    "ExceptIfHeaderContainsMessageHeader": null,
    "ExceptIfHeaderContainsWords": null,
    "ExceptIfFromAddressContainsWords": null,
    "ExceptIfSenderDomainIs": [
        "blinkops.com",
        "gmail.com"
    ],
    "ExceptIfRecipientDomainIs": null,
    "ExceptIfSubjectMatchesPatterns": null,
    "ExceptIfSubjectOrBodyMatchesPatterns": null,
    "ExceptIfHeaderMatchesMessageHeader": null,
    "ExceptIfHeaderMatchesPatterns": null,
    "ExceptIfFromAddressMatchesPatterns": null,
    "ExceptIfAttachmentNameMatchesPatterns": null,
    "ExceptIfAttachmentExtensionMatchesWords": null,
    "ExceptIfAttachmentPropertyContainsWords": null,
    "ExceptIfContentCharacterSetContainsWords": null,
    "ExceptIfSCLOver": null,
    "ExceptIfAttachmentSizeOver": null,
    "ExceptIfMessageSizeOver": null,
    "ExceptIfWithImportance": null,
    "ExceptIfMessageTypeMatches": null,
    "ExceptIfRecipientAddressContainsWords": null,
    "ExceptIfRecipientAddressMatchesPatterns": null,
    "ExceptIfSenderInRecipientList": null,
    "ExceptIfRecipientInSenderList": null,
    "ExceptIfAttachmentContainsWords": null,
    "ExceptIfAttachmentMatchesPatterns": null,
    "ExceptIfAttachmentIsUnsupported": false,
    "ExceptIfAttachmentProcessingLimitExceeded": false,
    "ExceptIfAttachmentHasExecutableContent": false,
    "ExceptIfAttachmentIsPasswordProtected": false,
    "ExceptIfAnyOfRecipientAddressContainsWords": null,
    "ExceptIfAnyOfRecipientAddressMatchesPatterns": null,
    "ExceptIfHasSenderOverride": false,
    "ExceptIfMessageContainsDataClassifications": null,
    "ExceptIfMessageContainsAllDataClassifications": null,
    "ExceptIfSenderIpRanges": null,
    "PrependSubject": null,
    "SetAuditSeverity": "Low",
    "ApplyClassification": null,
    "ApplyHtmlDisclaimerLocation": "Prepend",
    "ApplyHtmlDisclaimerText": "this is from example.com!",
    "ApplyHtmlDisclaimerFallbackAction": "Ignore",
    "ApplyRightsProtectionTemplate": null,
    "ApplyRightsProtectionCustomizationTemplate": null,
    "SetSCL": null,
    "SetHeaderName": null,
    "SetHeaderValue": null,
    "RemoveHeader": null,
    "AddToRecipients": null,
    "CopyTo": null,
    "BlindCopyTo": null,
    "AddManagerAsRecipientType": null,
    "ModerateMessageByUser": null,
    "ModerateMessageByManager": false,
    "RedirectMessageTo": null,
    "RejectMessageEnhancedStatusCode": null,
    "RejectMessageReasonText": null,
    "DeleteMessage": false,
    "Disconnect": false,
    "Quarantine": false,
    "SmtpRejectMessageRejectText": null,
    "SmtpRejectMessageRejectStatusCode": null,
    "LogEventText": null,
    "StopRuleProcessing": false,
    "SenderNotificationType": null,
    "GenerateIncidentReport": null,
    "IncidentReportContent": null,
    "RouteMessageOutboundConnector": null,
    "RouteMessageOutboundRequireTls": false,
    "ApplyOME": false,
    "RemoveOME": false,
    "RemoveOMEv2": false,
    "RemoveRMSAttachmentEncryption": false,
    "GenerateNotification": null,
    "Identity": "Test",
    "DistinguishedName": "CN=testDC=PROD,DC=OUTLOOK,DC=COM",
    "Guid": "12345678-c51c-4945-94ce-e8485d24e8df",
    "ImmutableId": "12345678-c51c-4945-94ce-e8485d24e8df",
    "OrganizationId": "123456789",
    "Name": "Test",
    "IsValid": true,
    "WhenChanged": "2022-12-15T15:38:58+00:00",
    "ExchangeVersion": "0.1 (8.0.535.0)",
    "ObjectState": "Unchanged"
}

Automation Library Example

Get Transport Rule with Exchange Online and Send Results Via Slack

Preview this Automation on desktop