{"id":14502,"date":"2026-01-14T12:01:19","date_gmt":"2026-01-14T03:01:19","guid":{"rendered":"https:\/\/m365jp.net\/?p=14502"},"modified":"2026-01-14T12:02:43","modified_gmt":"2026-01-14T03:02:43","slug":"mc1217649-endpoint-dlp-sensitive-data-alerting-retiring-in-defender-use-purview-dlp","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-01-14-mc1217649-endpoint-dlp-sensitive-data-alerting-retiring-in-defender-use-purview-dlp","title":{"rendered":"MC1217649 | Endpoint DLP-sensitive data alerting retiring in Defender; use Purview DLP"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1217649 | Endpoint DLP-sensitive data alerting retiring in Defender; use Purview DLP<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n01\/14\/2026 02:13:29<\/td>\n<\/tr>\n
Start Time<\/th>\n01\/14\/2026 02:12:56<\/td>\n<\/tr>\n
End Time<\/th>\n04\/24\/2026 07:00:00<\/td>\n<\/tr>\n
Action Required By Date<\/th>\n2026-02-15T08:00:00Z<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

[Introduction]<\/b><\/p>\n

<\/p>\n

We\u2019re retiring the ability to create alert policies and generate DLP alerts for sensitive data activities on endpoints in the Microsoft Defender portal<\/i><\/b>. This change unifies endpoint data loss prevention (DLP) detection and alerting under Microsoft Purview DLP, giving organizations a more consistent experience and access to advanced enforcement and investigation capabilities in Microsoft Defender XDR.<\/p>\n

[When this will happen]<\/b><\/p>\n

<\/p>\n

    <\/p>\n
  • February 16, 2026<\/b>: Sensitive data activity options will be removed from new alert policy creation in the Microsoft Defender portal<\/i>.<\/li>\n

    <\/p>\n

  • March 23, 2026<\/b>: Existing alert policies using these activities will stop generating alerts.<\/li>\n

    <\/ul>\n

    [How this affects your organization]<\/b><\/p>\n

    Who is affected:<\/i><\/p>\n

    <\/p>\n

      <\/p>\n
    • Organizations that use alert policies in Microsoft Defender XDR<\/i> to monitor sensitive data activities on endpoints.<\/li>\n

      <\/p>\n

    • Admins who create or manage alert policies in the Microsoft Defender portal<\/i>.<\/li>\n

      <\/ul>\n

      What will happen:<\/i><\/p>\n

      <\/p>\n

        <\/p>\n
      • The following endpoint-sensitive data activities will be retired and removed from alerting in the Microsoft Defender portal<\/i>:<\/li>\n

        <\/p>\n

          <\/p>\n
        • Copying sensitive data to removable media, remote shares, or the clipboard<\/li>\n

          <\/p>\n

        • Uploading sensitive files to third-party apps or services<\/li>\n

          <\/p>\n

        • Accessing sensitive files with unallowed apps<\/li>\n

          <\/ul>\n

          <\/p>\n

        • New alert policies cannot use these activities after February 16, 2026<\/b>.<\/li>\n

          <\/p>\n

        • Existing alert policies will stop generating alerts after March 23, 2026<\/b>.<\/li>\n
        • These activities will not be re-enabled<\/b> in the Defender portal<\/i> after retirement.<\/li>\n

          <\/p>\n

        • Organizations can continue to detect and alert on these activities using Microsoft Purview DLP<\/b>, which supports:<\/li>\n

          <\/p>\n

        • Alerting and incident creation<\/li>\n
        • User notifications through policy tips<\/li>\n
        • Activity blocking and restriction<\/li>\n
        • Unified investigation of DLP and security alerts in Microsoft Defender XDR<\/i><\/li>\n
        • Purview DLP alerts for these endpoint activities appear in the Defender XDR experience for triage and investigation<\/i>.<\/li>\n<\/ul>\n

          <\/p>\n

          [What you can do to prepare]<\/b><\/p>\n

          <\/p>\n

Machine Translation<\/th>\n\n

[\u306f\u3058\u3081\u306b]<\/b><\/p>\n

<\/p>\n

Microsoft Defender\u30dd\u30fc\u30bf\u30eb<\/i>\u3067\u306f\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u4e0a\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u6d3b\u52d5\u306b\u5bfe\u3059\u308b\u30a2\u30e9\u30fc\u30c8\u30dd\u30ea\u30b7\u30fc\u4f5c\u6210\u3084DLP\u30a2\u30e9\u30fc\u30c8\u751f\u6210\u306e\u6a5f\u80fd\u3092\u5ec3<\/b>\u6b62\u3057\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3088\u308a\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u30c7\u30fc\u30bf\u640d\u5931\u9632\u6b62(DLP)\u306e\u691c\u51fa\u3068\u30a2\u30e9\u30fc\u30c8\u304cMicrosoft Purview DLP\u306e\u4e0b\u3067\u7d71\u5408\u3055\u308c\u3001\u7d44\u7e54\u306fMicrosoft Defender XDR\u306b\u304a\u3051\u308b\u9ad8\u5ea6\u306a\u57f7\u884c\u304a\u3088\u3073\u8abf\u67fb\u6a5f\u80fd\u306b\u3088\u308a\u4e00\u8cab\u3057\u305f\u4f53\u9a13\u3068\u30a2\u30af\u30bb\u30b9\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n

[\u3044\u3064\u8d77\u3053\u308b\u304b]<\/b><\/p>\n

<\/p>\n