How to Exclude a Network Share from Microsoft Endpoint DLP
Question details
The user wants to exclude specific destination network shares from Microsoft Purview Endpoint DLP so that copying files there does not trigger a business justification prompt.
- Product
- Microsoft Purview Endpoint DLP
- Device & OS
- Windows 10
- Scenario
- Copying files to a selected destination network share without needing to provide a business justification to the Endpoint DLP system.
- Observed behavior
- Current Endpoint DLP settings and standard Windows file path exclusions do not provide a dedicated option to exempt target network shares from justification prompts.
Ensure you have compliance administrator or global administrator permissions in the Microsoft Purview compliance portal to view your organization's current Endpoint DLP policies.
Review File Path Exclusions and Submit Microsoft Feedback
Since Endpoint DLP does not natively support excluding destination network shares from justification prompts, you should review your existing policies and submit a feature request to Microsoft.
Currently, Microsoft Purview Endpoint DLP does not provide a dedicated setting to exempt target network shares from justification prompts. Standard Windows file path exclusions serve a different purpose, typically focusing on source directories rather than destination network paths.
If your organization requires this specific exemption to streamline workflows without repetitive business justification prompts, the best course of action is to submit this requirement through the official Microsoft Feedback portal so the product team can evaluate it for future updates.
Navigate to the official Microsoft Feedback portal using your web browser and sign in with your Microsoft 365 E5 administrative account.
Create a new feedback post detailing your requirement to exclude specific destination network shares from Endpoint DLP justification prompts. Specify that you are using Windows 10 and how this impacts your compliance workflow.
In the Microsoft Purview compliance portal, go to Data loss prevention > Endpoint DLP settings > File path exclusions. Verify that your current source exclusions are configured correctly, even though they cannot be used for destination shares.
Switch to WPS Office for a Streamlined Document Experience
While enterprise security policies like Endpoint DLP are managed at the Microsoft 365 network level, you can still enjoy a fast, lightweight, and highly compatible document editing experience on your local device with WPS Office. It offers full compatibility with Microsoft Office formats without heavy resource usage.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your Windows 10 device.
- 2. Install and Launch: Run the installer and follow the on-screen instructions. Once installed, launch WPS Office to access Writer, Spreadsheets, and Presentation.
- 3. Open and Save Files: Open your existing Microsoft Office files seamlessly. You can save your edited documents directly to your local drives or accessible network shares.
Frequently Asked Questions
Can I use Windows file path exclusions for destination network shares in DLP?
No, standard Windows file path exclusions in Microsoft Purview Endpoint DLP are designed to exclude specific source file paths or folders from being monitored. They do not act as an allowed list for destination network shares.
Why does copying files to my network share prompt for business justification?
Your organization's Endpoint DLP policy is likely configured to monitor or restrict the copying of sensitive information to unverified network locations. Because the destination network share cannot be explicitly exempted, the system prompts for a business justification to proceed.
Does Microsoft 365 E5 include Endpoint DLP features?
Yes, Microsoft 365 E5 includes advanced compliance and security capabilities, such as Microsoft Purview Endpoint DLP, which allows administrators to monitor and protect sensitive data across enrolled Windows 10 and 11 devices.
Where can I submit feature requests for Microsoft Purview Endpoint DLP?
You can submit feature requests, such as adding the ability to exclude destination network shares, through the official Microsoft Feedback portal. The Microsoft product team actively reviews these submissions for future updates.
