Microsoft Purview: Endpoint Data Loss Prevention – Ability to protect files stored in the excluded folders in Windows

Updated September 14, 2026: We have updated the timeline. Thank you for your patience.

What and why

Microsoft Purview Endpoint Data Loss Prevention (DLP) is introducing the ability to protect sensitive files even when they reside in commonly excluded Windows folders such as AppData directories and temporary folders. Previously, files stored in these excluded paths were not subjected to Endpoint DLP policy enforcement. With this update, policy checks will apply during key egress actions, including copying, printing, saving to network shares, and uploading to cloud services, helping reduce the risk of sensitive data leaving your organization from these user-writable locations.

This message is associated with Microsoft 365 Roadmap ID 562992.