Forum Discussion
MDE endpoint to Purview onboarding
Hi All,
I have Microsoft defender endpoint plan 2 onboarded endpoints in my organisation, as a new dlp functionality i need to test purview DLP functionality for few of my endpoints but i see that it needs to be enabled the device onboarding in microsoft purview under settings, and it also says that all MDE endpoints will populate automatically here and onboarded since they alreay have MDE, now my worry is, if i enable this and all endpoints start onboarding under purview automatically and if we start facing any difficulty with enspoints how to stop or rollback that since no. of endpoints are more than 500. although i have checked there are no DLP settings or policies configured in the purview. is there any way to include only few endpoints to purview and test before enabling the tenant level button?
is there a way we can disable the button if we enable it and we start encountring any issues with endpoints?
Appreciate help on this.
Thanks
Vipin
1 Reply
The important distinction is device onboarding versus DLP policy enforcement. Microsoft documents shared onboarding between Defender for Endpoint and Purview, so your existing MDE devices do not need a second onboarding package. Do not treat the tenant monitoring switch as a way to onboard only a few of those devices. For a controlled DLP pilot, create a policy whose Devices location targets specific devices or device groups, and begin in simulation mode. Review the Always audit file activity setting and any other Purview monitoring configuration beforehand: having no DLP policies does not necessarily mean no activity collection. Your rollback plan should first disable the pilot policy and verify its effect. Avoid offboarding devices merely to undo the pilot, because onboarding is shared with MDE. If disabling tenant monitoring itself is required, obtain confirmation of the supported reversal and its effects from Microsoft before enabling it.
