How to Fix Endpoint DLP Not Protecting OneDrive-Synchronized Folders
Question details
Users report that Endpoint Data Loss Prevention (DLP) policies behave differently and fail to properly protect documents created inside locally synchronized OneDrive folders.
- Product
- Microsoft 365 E5 / Defender for Endpoint
- Device & OS
- not provided
- Scenario
- Applying endpoint security policies to sensitive documents managed within OneDrive-synchronized directories.
- Observed behavior
- Documents created inside OneDrive-synchronized folders bypass Endpoint DLP protection, whereas files created in other local directories are successfully protected by the policies.
Verify that you have Compliance Administrator or Global Administrator privileges in your Microsoft 365 tenant before investigating and modifying endpoint security policies.
Consult the Azure Information Protection Community
Because this issue involves specialized policy behavior between Defender for Endpoint and OneDrive sync, the official Microsoft recommendation is to escalate the issue in the Azure Information Protection Q&A forum.
Endpoint DLP configurations can be highly complex. Known sync engine conflicts or state delays with OneDrive-synchronized folders often require backend investigation by Microsoft engineers or community experts to fully resolve.
Open your web browser and go to the official Microsoft Q&A platform (docs.microsoft.com/en-us/answers).
Use the platform's search bar to locate the 'Azure Information Protection' topic or navigate directly to the dedicated AIP forum.
Create a new question detailing your Microsoft 365 E5 environment, your Defender for Endpoint configuration, and the exact behavior of the OneDrive-synchronized folders you are observing.
Looking for a reliable and secure alternative to Microsoft Office?
While Microsoft 365 offers complex enterprise DLP solutions, configuring and troubleshooting them can be difficult. If you are looking for a highly compatible, lightweight, and free alternative for your daily office tasks, consider WPS Office. It provides robust local document protection features and a familiar interface without the heavy configuration overhead.
- 1. Download WPS Office: Visit the official WPS Office website and click on the Free Download button.
- 2. Install the application: Run the downloaded installer file and follow the simple on-screen instructions to set up the software.
- 3. Open and secure your files: Launch WPS Office to easily edit your Microsoft Office files and use the built-in encryption feature to password-protect sensitive data.
Frequently Asked Questions
Why does Endpoint DLP behave differently with OneDrive-synchronized folders?
OneDrive-synchronized folders use specialized sync engines and file states, such as Files On-Demand. Endpoint DLP policies sometimes struggle to hook into these virtualized file states immediately, causing differences in protection compared to standard local directories.
Does WPS Office support data protection for sensitive documents?
Yes, WPS Office includes built-in document encryption and password protection, allowing you to secure your sensitive files locally and prevent unauthorized access without relying on complex network policies.
Who has permission to modify Endpoint DLP policies in Microsoft 365?
Only users assigned the appropriate administrative roles, such as Compliance Administrator or Global Administrator, can access the Microsoft Purview compliance portal to view, create, or modify Endpoint DLP policies.
