Microsoft Purview | Data Loss Prevention: Support for scoping policies for devices and device group in Endpoint

Updated March 11, 2025: We have updated the content. Thank you for your patience.

In Microsoft Purview, before this rollout, you can create an Endpoint Data Loss Prevention (DLP) policy and assign it to specific users or user groups.

After this rollout, you will be able to create and assign policy based on both users and machines. You can use this feature to achieve different policies for same user on different devices.

This message is associated with Microsoft 365 Roadmap ID 480732.

When this will happen

Public Preview: We began rolling out mid-March 2025 and expect to complete by late March 2025.

General Availability (Worldwide): We will begin rolling out early April 2025 and expect to complete by mid-April 2025.

How this will affect your organization

This feature will not impact your organization unless you use the feature in your policy. The feature will be available by default for admins to configure.

What you need to do to prepare

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update any relevant documentation.

To use this feature, you must have one of these builds installed:

• Windows 10: December 10, 2024—KB5048652 (OS Builds 19044.5247 and 19045.5247) - Microsoft Support
• Windows 11 22H2: November 21, 2024—KB5046732 (OS Builds 22621.4541 and 22631.4541) Preview - Microsoft Support
• Windows 11 24H2: December 10, 2024—KB5048667 (OS Build 26100.2605) - Microsoft Support

These prerequisites may be updated when we release this feature. Please follow our public document for the latest prerequisite information.

Learn more: Configure endpoint DLP settings | Microsoft Learn