{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreihdrea7lo7mh4yovg46tjsoun2oqz7xc64hnpjwufgsudoca4cjia",
    "uri": "at://did:plc:xxrzfynfiasdpbxteqxi4jgq/app.bsky.feed.post/3mggmtkbfa4x2"
  },
  "description": "Phase 2 of always-on diagnostics for Endpoint Data Loss Prevention enables admins to collect diagnostic traces from Windows endpoints via the Purview portal without user involvement, improving troubleshooting. Rolling out worldwide from March 2026, it requires admin enablement and does not affect...",
  "path": "/m365-message-center/message/mc1246003/",
  "publishedAt": "2026-03-07T01:00:18.000Z",
  "site": "https://blog.tophhie.cloud",
  "tags": [
    "**499431**",
    "Always-on diagnostics for Endpoint DLP",
    "Always-on diagnostics for endpoint DLP | Microsoft Purview | Microsoft Learn"
  ],
  "textContent": "**[Introduction]**\n\nWe’re introducing **Phase 2 of always-on diagnostics** for Endpoint Data Loss Prevention (DLP). This update enables admins to collect diagnostic traces directly from Windows endpoints and upload them to Microsoft through the Purview portal during support investigations—without involving the employee or information worker . This improves troubleshooting efficiency and helps resolve support cases faster.\n\nThis message is associated with **Microsoft 365 Roadmap ID****499431**.\n\n**[When this will happen]**\n\n  * **General Availability (Worldwide): We will begin rolling out in early March 20265** and expect to complete by **mid-March 2026**.\n\n\n\n**[How this affects your organization]**\n\n_Who is affected_\n\n  * Admins who manage **Endpoint DLP** in _Microsoft Purview_\n  * Organizations using Windows endpoints with Endpoint DLP enabled\n\n\n\n _What will happen_\n\n  * Admins can request and retrieve always-on diagnostics directly from Windows endpoints using the Purview portal.\n  * Users are not interrupted, and no device-side interaction is required.\n  * Diagnostic traces can be uploaded directly to Microsoft Support using a request number.\n  * The change reduces time to reproduce issues, collect logs, and resolve support cases.\n  * Existing Endpoint DLP policies and enforcement remain unchanged.\n  * This feature requires admin enablement; it is **not automatically turned on**. Learn more: Always-on diagnostics for Endpoint DLP.\n\n\n\n**[What you can do to prepare]**\n\n  * Review the documentation for configuring always-on diagnostics for Endpoint DLP.\n  * Enable the feature for your organization if you plan to use the enhanced troubleshooting capabilities.\n  * Update internal helpdesk documentation to ensure support staff know how to request traces from the Purview portal.\n  * Share the Learn documentation with admins who manage Purview or DLP policies.\n\n\n\n**Learn more:** Always-on diagnostics for endpoint DLP | Microsoft Purview | Microsoft Learn\n\n**[Compliance considerations]**\n\nNo compliance considerations identified. Review as appropriate for your organization.",
  "title": "MC1246003: Endpoint Data Loss Prevention: Always-on diagnostics for Windows endpoints (Phase 2)",
  "updatedAt": "2026-03-07T01:00:19.106Z"
}