Detect and protect unscannable encrypted or password protected files

Coming soon to public preview for Microsoft Purview Data Loss Prevention (DLP), we’re introducing the ability to detect and protect unscannable encrypted or password protected files on endpoint devices.

This message is associated with Microsoft 365 Roadmap ID 93416.

When this will happen:

Rollout to public preview will begin in late August and is expected to be complete by mid-September.

How this will affect your organization:

With this capability, your Microsoft Purview Data Loss Prevention (DLP) policies will be able to detect the presence of and prevent unauthorized use of encrypted, password protected, other otherwise unscannable Microsoft Office, PDF, and archive files on Windows endpoint devices.

Different organizations may opt to define different actions for content that cannot be scanned, such as blocking activities with these files or auditing and reporting activities for analysis. This preview capability introduces policy controls such as conditions and exceptions to help admins define the desired course of action when unscannable sensitive files are encountered.

What you need to do to prepare:

Configure endpoint DLP policies and settings from the Data loss prevention solution in the Microsoft Purview compliance portal.

Learn more: Using Endpoint DLP – Microsoft Purview (compliance)