Monitored filesĮndpoint DLP supports monitoring of these file types through policy:ĭLP audits the activities for these file types, even if there isn't a policy match: See, Design a data loss prevention policy for more guidance on designing your DLP policies.

Set the actions for each activity to Block.In this case, content contains set to Sensitive information type*, and select Credit Card. Create a rule in the policy that detects the type of information that you want to protect.Create a policy and scope it to endpoints and to that group of users.Say you want to block all items that contain credit card numbers from leaving endpoints of Finance department users. It also detects when a user copies and pastes content among files within the same app, process or item for Word, Excel, and PowerPoint.ĭetects when a user attempts to copy an item or information to removable media or USB device.ĭetects when a user attempts to copy an item to a network share or mapped network driveĭetects when a user attempts to print a protected item to a local or network printer.ĭetects when a user attempts to copy an item to a remote desktop sessionĭetects when a user attempts to copy an item to an unallowed Bluetooth app (as defined in the list of unallowed Bluetooth aps in Endpoint DLP settings). Microsoft Edge will then either allow or block the upload or access based on the DLP policy configurationĭetects when a user attempts to copy information from a protected item and then paste it into another app, process or item. If they are using a browser that is listed in DLP as an unallowed browser, the upload activity will be blocked and the user is redirected to use Microsoft Edge. Upload to cloud service, or access by unallowed browsersĭetects when a user attempts to upload an item to a restricted service domain or access an item through a browser. Endpoint activities you can monitor and take action onĮndpoint DLP enables you to audit and manage the following types of activities users take on sensitive items that are physically stored Windows 10, Windows 11, or macOS devices. Once policy updates are synchronized, items on targeted devices are automatically re-evaluated the next time they are accessed or modified. When a policy is updated in compliance center, it generally takes about an hour for those updates to be synchronized across the service.

In Microsoft Purview, DLP policy evaluation of sensitive items occurs centrally, so there is no time lag for policies and policy updates to be distributed to individual devices.

.dlm microsoft download manager