Jennifer A Bergsneider When you see a GUID like 47******b188d3
in a Purview DLP policy, that’s an internal identifier for a directory object (in your case, the device you added as an exclusion in the policy scope).
Since you mentioned the error only appears when trying to remove a device exclusion, the most likely causes are:
- The device object has already been deleted or is no longer resolvable in Azure AD / Intune, so Purview can’t map the GUID back to a live object.
- There’s a sync delay or mismatch between Purview policy scope and the underlying device directory.
Ways to figure it out:
- Go to Microsoft Entra admin center → Devices and search by the device name/ID you excluded. If it no longer exists there, that’s why the GUID shows as “not found.”
- If the device does exist, compare its Object ID with the GUID shown in the error.
- If the object is missing but still listed in the DLP policy, you’ll need to edit the policy scope and re-select valid devices. Sometimes simply re-saving the policy clears stale references.
If the device does exist but Purview still throws this error, it usually requires support intervention because the backend resource mapping is stuck.
I hope this information helps. Please do let us know if you have any further queries.
Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.