495683 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention Always-on diagnostics for Windows endpoints (Phase 1)

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, Windows

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

MC1093234

Details:

This feature release ‘Always-on diagnostics’, captures critical diagnostic data from onboarded endpoint devices running on Windows OS for EDLP issue reporting. Comprehensive trace logs will be automatically recorded and stored locally on the devices, eliminating the need to reproduce issues when submitting investigation requests to Microsoft. It allows for the collection of detailed traces over extended periods (up to 90 days). While raising tickets to submit investigation requests to Microsoft regarding Microsoft Endpoint DLP, customers can share enhanced diagnostic information with Microsoft without needing to reproduce the exact scenario.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-06-12

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

The new feature in Microsoft Purview's compliance portal, called "Always-on diagnostics," is designed to help organizations manage and report issues related to Endpoint Data Loss Prevention (EDLP) on Windows devices more efficiently. Think of it like having a security camera in a store that continuously records footage. If something goes wrong, you don't need to recreate the incident; you can simply review the footage to understand what happened.

In this case, the "footage" is the comprehensive trace logs that are automatically recorded and stored on the devices. These logs capture critical diagnostic data that can be used to investigate issues with EDLP. This means that when you need to report a problem to Microsoft, you can provide them with detailed information without having to recreate the problem scenario. This is similar to providing the security camera footage to the police instead of trying to explain what happened from memory.

The logs can capture data over an extended period, up to 90 days, which is like having a long history of footage to review if needed. This feature is especially useful because it reduces the time and effort required to diagnose and resolve issues, making the process more efficient for both the organization and Microsoft.