Endpoint Data Loss Prevention (DLP): Enhancements to the device onboarding page

Originally posted by Microsoft Jun 17, 2024 Uncategorized 0 Comments

The device onboarding page for Endpoint Data Loss Prevention (DLP) has been enhanced with features like IP address search, a ‘Valid user’ filter, and a refined device list excluding non-DLP supported devices like Android. New properties have been added to the export report. Rollout begins June 2024 for Public Preview and August 2024 for General Availability. No admin action is required for the update.

For Endpoint Data Loss Prevention (DLP), we’ve added enhancements to the device onboarding page. These include:

• Ability to search by IP address to look up devices.
• New filter for ‘Valid user’ available.
• Refined device list to only include devices that can be DLP supported, which excludes Android devices from showing up in the device onboarding list.
• New properties in the export report.

This message is associated with Microsoft 365 Roadmap ID 393934

When this will happen:

Public Preview: We will begin rolling out early June 2024 and expect to complete by late June 2024.

General Availability (Worldwide, GCC, GCC-High, DoD): We will begin rolling out early August 2024 and expect to complete by late August 2024.

How this will affect your organization:

• You will be able to look up devices using their IP address in the search box (located in the upper right corner of the page) and view their device health status in the device onboarding page. 

View image in new tab

• You can filter for valid or invalid devices using the “Valid user” filter to get a list of all the devices that have an invalid user status. When the valid user status is invalid, it means that there was no authenticated user found. Without proper authentication, data classification is impeded. If the status of the valid user status is invalid, follow the provided remediation guidance.

What you need to do to prepare:

This rollout will happen automatically with no admin action required. You may want to notify your users about this change and update any relevant documentation as appropriate.

View image in new tab

• The device onboarding page has been enhanced to only show devices that can be DLP supported.
• You can get all the device information from the device onboarding page using the export capability. The export report now contains new device properties including:
  • Valid user
  • First onboarded date
  • MDATP device ID
  • Defender engine version
  • Defender Mocamp version
  • Endpoint DLP status
  • Last policy sync time
  • Advanced Classification bandwidth usage exceeded

View image in new tab

For more information, see Troubleshooting endpoint data loss prevention configuration and policy sync | Microsoft Learn

Message ID: MC801975