Question

You are deploying Microsoft Purview Endpoint DLP to protect sensitive documents on 200 corporate Windows 11 workstations. Before your Endpoint DLP policies will report any activity from these devices, you must ensure the devices meet all prerequisites. The devices are already Microsoft Entra hybrid joined. Which action is REQUIRED to make these devices appear as managed in the Purview portal and start generating Endpoint DLP signals?

Accepted Answer

Onboard the devices into Microsoft Defender for Endpoint (or run the Purview device onboarding script), which enables the device to be monitored in the Microsoft Purview portal.

Answer

Install the Microsoft Purview Information Protection client and enable the on-premises scanner in discovery mode on each workstation.

Answer

Assign each user an Insider Risk Management license and enable the forensic evidence setting in the Purview settings.

Answer

Create a file policy in Microsoft Defender for Cloud Apps that targets the Windows devices and set it to auto-quarantine matched files.