No incidents generated with Google Drive when googledrivesync.exe is installed

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

Unable to detect sensitive data when using Google Drive with googledrivesync.exe installed.

 WARNING | FileSystem.DetectionRequestAddTask | Failed to open file C:\Users\<user>\Google Drive\<file> Permission denied

Cause

Installing the Google drive sync application creates the "C:\Users\Google Drive\" folder. When it does this it does not grant any permissions to the 'System' Account.

Resolution

As EDPA runs as 'System' we need to add 'System' user to the Google Drive folder and grant it full permissions.  This will allow DLP to scan the folder and incidents can be generated.