Skip to main content
🦉
Message CenterMicrosoft 365 Updates
HomePermissionsTenant FinderPortfolio
🦉
M365 Message Centerby Cengiz YILMAZ

Track the latest updates, features, and announcements for Microsoft 365 services. Comprehensive archive of service updates and important changes.

Quick Links

HomePermissionsTenant FinderPortfolio

Connect

© 2026 M365 Message Center. Created with ❤ by Cengiz YILMAZ

Data sourced from Microsoft 365 Message Center • Not affiliated with Microsoft

  1. Home
  2. /
  3. MC1246003

Endpoint Data Loss Prevention: Always-on diagnostics for Windows endpoints (Phase 2)

Informational

Message ID

MC1246003
View in Admin Center

Roadmap ID

499431
View in Roadmap

Services

Microsoft Purview

Affected Platforms

DesktopWeb

Summary

Phase 2 of always-on diagnostics for Endpoint Data Loss Prevention enables admins to collect diagnostic traces from Windows endpoints via the Purview portal without user involvement, improving troubleshooting. Rolling out worldwide from March 2026, it requires admin enablement and does not affect existing DLP policies.

Details

Introduction

We’re introducing Phase 2 of always-on diagnostics for Endpoint Data Loss Prevention (DLP). This update enables admins to collect diagnostic traces directly from Windows endpoints and upload them to Microsoft through the Purview portal during support investigations—without involving the employee or information worker . This improves troubleshooting efficiency and helps resolve support cases faster.

This message is associated with Microsoft 365 Roadmap ID 499431.

When this will happen

  • General Availability (Worldwide): We will begin rolling out in early March 20265 and expect to complete by mid-March 2026.

How this affects your organization

Who is affected

  • Admins who manage Endpoint DLP in Microsoft Purview
  • Organizations using Windows endpoints with Endpoint DLP enabled

What will happen

  • Admins can request and retrieve always-on diagnostics directly from Windows endpoints using the Purview portal.
  • Users are not interrupted, and no device-side interaction is required.
  • Diagnostic traces can be uploaded directly to Microsoft Support using a request number.
  • The change reduces time to reproduce issues, collect logs, and resolve support cases.
  • Existing Endpoint DLP policies and enforcement remain unchanged.
  • This feature requires admin enablement; it is not automatically turned on. Learn more: Always-on diagnostics for Endpoint DLP.

What you can do to prepare

  • Review the documentation for configuring always-on diagnostics for Endpoint DLP.
  • Enable the feature for your organization if you plan to use the enhanced troubleshooting capabilities.
  • Update internal helpdesk documentation to ensure support staff know how to request traces from the Purview portal.
  • Share the Learn documentation with admins who manage Purview or DLP policies.

Learn more: Always-on diagnostics for endpoint DLP | Microsoft Purview | Microsoft Learn

Compliance considerations

No compliance considerations identified. Review as appropriate for your organization.

Timeline

Published
Mar 6, 2026
Message published to Message Center
Updated
Mar 6, 2026
Message content updated
End Date
Apr 12, 2026
Message timeline ends

Tags

#New feature#User impact#Admin impact

Category

Stay Informed

Related Messages

Similar updates

MC1249429

Microsoft Purview compliance portal: Data Security Investigations introduces new soft purge mitigation action

Mar 12, 2026
MC1247881

Microsoft Purview DLP: New policy configuration options available for inline network and Edge for Business

Mar 9, 2026
MC1246005

Microsoft Purview | Insider Risk Management – Enhancements to the Data Security Triage Agent

Mar 6, 2026
MC1244281

Microsoft Purview | Insider Risk Management - Ability to preview content in Insider Risk Management Alerts

Mar 4, 2026
MC1238434

Microsoft Purview | Data Lifecycle Management - Separate Retention policies for Copilots and AI Apps

Feb 25, 2026