Attribute lookup fetch incorrect details from AD

Products

• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Enforce

Issue/Introduction

The retrieval of incorrect details through attribute lookup on incidents results in email notifications being sent to the wrong manager email address.

Environment

NA

Cause

Multiple records exist for 'sender' email address on Active Directory (AD), where the same email ID is assigned to multiple groups or users.

Resolution

Please ensure that each user is uniquely assigned an email address. If the same email ID is assigned to multiple users, the DLP system will retrieve and update the incident with the first record returned from Active Directory.