My default policy blocks Encrypted Messages, has medium sensitivity for HTML content and blocks Macros with high sensitivity. I plan on keeping it that way for most of the company. We do have several hundred employees who need to have exceptions in those areas. They have legit business needs for these emails and are aware of the risks.
Currently I have to open a support ticket for each exception. This is a problem from a timing perspective and from a configuration perspective as I do not have a visible list of all the exception we have made.
Could you please put in a request to have per-user and global exception options for the following policy areas:
Antivirus>Content
Antivirus>Encrypted Messages