500895 – Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Endpoint DLP support classification of Azure RMS protected Office documents

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Data Loss Prevention, Windows

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

Endpoint DLP can now classify Office files stored in Windows devices that have Azure RMS protection applied. Classification will be triggered when file is used in applications or when just-in-time classification is enabled

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-08-22

updated:
2026-03-10

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

Azure RMS protects Office documents by allowing only authorized access, while Endpoint DLP can read and classify these protected documents to ensure compliance with organizational policies, even when they are locked.

Direct effects for Operations**

Data Loss Prevention Implementation
Without proper preparation, the implementation of Endpoint DLP may lead to unintentional data loss or access issues for users who rely on Azure RMS protected Office documents, as classification processes may disrupt normal file access and usage.
   - roles: IT Administrators, End Users
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/endpoint-dlp-supports-classification-of-azure-rms-protected/ba-p/3701230" target="_blank" rel="nofollow noopener noreferrer">https://techcommunity.microsoft.com/t5/security-compliance-identity/endpoint-dlp-supports-classification-of-azure-rms-protected/ba-p/3701230, https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention " target="_blank" rel="nofollow noopener noreferrer">https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention

User Experience Disruption
If Endpoint DLP is deployed without adequate training and communication, users may experience confusion or frustration due to unexpected prompts or restrictions when accessing their documents, leading to decreased productivity.
   - roles: End Users, Support Staff
   - references: https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention, https://techcommunity.microsoft.com/t5/security-compliance-identity/endpoint-dlp-supports-classification-of-azure-rms-protected/ba-p/3701230" target="_blank" rel="nofollow noopener noreferrer">https://techcommunity.microsoft.com/t5/security-compliance-identity/endpoint-dlp-supports-classification-of-azure-rms-protected/ba-p/3701230

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only