If a user is working offline in Outlook and user details are not cached on the monitored endpoint the following may occur:
- Policies with Sender/User Pattern specified may not monitor Outlook
- Generated incidents (by policies other than those with Sender/User Pattern specified) display the sender email id as "Distinguished User Name" instead of the actual "Email-id."
This behavior may occur in all versions of Outlook clients including Outlook 2013.