After configuring a policy with a Directory Group matching condition, it does not work as expected on a DLP v11.x detection server.

1. Ensure the policy works without the Directory Group condition.
2. Verify the user you are testing with is indeed in the Active Directory group.
3. Ensure the Group Directory index job has run successfully since making any group membership changes.