Forum Discussion
Purview -> DLP -> Settings -> Endpoint DLP Settings
I have configured Browser and Domain Restrictions to sensitive data, with a condition as a sensitivity label. I used the Allow for a whitelist for sites, and all others should be blocked. I created...
Hi learnazure_ad,
The DLP policy isn't working because you might be missing a few setup steps. First, check that the "Endpoint DLP" feature is properly configured and enabled in the Microsoft 365 compliance center. Also, ensure that the devices are onboarded in Defender for Endpoint. Since you're using MS Defender for Business, make sure that it's fully integrated with Purview for device management. The greyed-out "onboard" option might be due to missing permissions or incomplete setup in Defender for Endpoint. Lastly, verify the correct assignment of the DLP policy to your device profiles, as DLP policies need to be explicitly applied to devices in Purview.
Let me know if you're still having issues so we can move forward.
Regards
We do not have Defender for Endpoint - is this what is missing?
Hey learnazure_ad,
Yes, Defender for Endpoint is a key component for managing and enforcing Endpoint DLP settings. Without Defender for Endpoint, the device management features in Purview may not function as expected. Since you’re using MS Business Premium, you might not have Defender for Endpoint included, as it’s part of Microsoft 365 E5 or Defender for Business. You’d need to upgrade or integrate Defender for Endpoint to enable full DLP functionality across devices.
Regards
Got some Defender for Endpoint licenses - same issue
Updated to Purview Enterprise - same issue
Via my ticket with MS support, they said i needed Defender for Endpoint licenses - this is not the case. MS support is very poor - people reading articles without any background knowledge.
Any idea what I can try next?
