MC1012244 – Microsoft Purview | Endpoint Data Loss Prevention: New Allow and Off modes for each activity (archived)

cloudscout.one Icon

check before: 2025-03-01

Product:

Defender, Defender for Endpoint, Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Online, US Instances, Web, World tenant

Status:

Launched

Change type:

New feature, Admin impact

Links:

480731

Details:

Summary:
Microsoft Purview Endpoint DLP is adding two new modes, "Off" and "Allow," to the existing "Audit only," "Block," and "Block with override" options. The rollout will occur in March 2025. These modes will be available by default, and prerequisites include specific Defender Antimalware client versions. No admin action is required before the rollout.

Details:
Before this rollout, Microsoft Endpoint data loss prevention (Endpoint DLP) supports Audit only, Block, and Block with override on the Create policy page in Microsoft Purview | Endpoint DLP. This rollout will add two new modes: Off and Allow.
This message is associated with Microsoft 365 Roadmap ID 480731.
[When this will happen:]
General Availability (Worldwide): We will begin rolling out early March 2025 and expect to complete by mid-March 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-02-21

updated:
2025-02-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft is adding "Off" and "Allow" modes to its Endpoint Data Loss Prevention tool in Microsoft Purview, expanding the existing options and requiring a specific version of the Defender Antimalware client for use starting March 2025.

Direct effects for Operations**

Data Loss Prevention Effectiveness
The introduction of 'Off' mode may lead to unmonitored data transfers, increasing the risk of data breaches and non-compliance with data protection regulations.
   - roles: Compliance Officer, IT Security Manager
   - references: https://learn.microsoft.com/purview/device-onboarding-overview#prepare-your-windows-devices, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=480731

User Notification and Awareness
With the new 'Allow' mode, users may not receive alerts or notifications about their actions, leading to a lack of awareness regarding data handling policies and potential misuse of sensitive information.
   - roles: End User, IT Support Specialist
   - references: https://learn.microsoft.com/purview/device-onboarding-overview#prepare-your-windows-devices, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=480731

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



Last updated 2 weeks ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!