Purview for Endpoint Security
Deploy endpoint DLP across Windows, macOS, and Chrome — with Copilot safeguards
Deploy multi-platform endpoint Data Loss Prevention across Windows, macOS, and Chrome — plus Microsoft 365 Copilot data protection — in a single intensive day. Aligned to the ASD/ACSC Essential Eight (Patch Applications and Restrict Administrative Privileges) and the Privacy Act 1988, this specialist module hardens data protection at the device edge.
At a Glance
Who it's for
- Endpoint security teams hardening data protection at the device edge
- Microsoft 365 administrators extending Purview DLP to Windows, macOS, and Chrome
- Security engineers deploying DLP across multi-platform endpoint estates
- Copilot deployment teams configuring prompt safeguards and citation controls
- Information security analysts responsible for USB, removable media, and network controls
Course Details
Course Overview
Purview for Endpoint Security is Module 3 of the six-part EDUC4TE Purview Training Track. This one-day, 8-hour specialist intensive extends data protection from the Microsoft 365 services to the device edge, enabling security teams to deploy endpoint Data Loss Prevention across Windows 10/11, macOS, and the Chrome browser. You will onboard devices, scope policies with device groups, and integrate Microsoft Defender for Endpoint with Microsoft Purview for unified data protection and just-in-time (JIT) protection. The programme drills into advanced endpoint scenarios — USB blocking and removable media controls, print watermarking, network share protection, and browser restrictions including handling unmanaged browsers — so you can stop data egress at the points where it most often leaks. The day closes with comprehensive Microsoft 365 Copilot DLP — configuring prompt safeguards and citation controls, and aligning endpoint and Copilot DLP policy so that classified content is protected consistently whether it leaves via a USB stick, a browser upload, or a Copilot prompt. Throughout, controls are mapped to the ASD/ACSC Essential Eight (Patch Applications and Restrict Administrative Privileges) and the Privacy Act 1988, and the module contributes towards the SC-401 Administering Information Security in Microsoft 365 exam. Module 2 — Data Protection Practitioners (or equivalent production Purview experience) is a prerequisite.
What You'll Learn
Course Curriculum
Module 1: Endpoint DLP architecture
120 min- Onboard Windows 10/11, macOS, and Chrome to Microsoft Purview Endpoint DLP
- Scope policies with device groups and understand policy scoping precedence
- Integrate Microsoft Defender for Endpoint with Purview for unified data protection
- Validate deployment prerequisites — licensing, device onboarding, and supported platforms
- Reference: Microsoft Learn — Get started with Endpoint DLP (updated 2025/2026)
Module 2: Advanced endpoint scenarios
180 min- Configure USB blocking and removable media controls to prevent data egress
- Implement network share protection for files copied to file shares
- Apply print watermarking and restrict printing of classified content
- Configure browser restrictions and handle unmanaged (unsupported) browsers
- Enable just-in-time (JIT) protection for files not yet evaluated (Reference: Microsoft Learn — Endpoint DLP, updated 2025/2026)
Module 3: Copilot DLP integration
180 min- Configure Microsoft 365 Copilot DLP prompt safeguards to protect classified content
- Implement citation controls to restrict how Copilot surfaces sensitive sources
- Align endpoint and Copilot DLP policy for consistent, end-to-end protection
- Monitor endpoint and Copilot DLP events using Activity Explorer and DLP alerts
- Reference: Microsoft Learn — Endpoint DLP and Copilot DLP (updated 2025/2026)
Who Should Attend
- Endpoint security teams
- Microsoft 365 administrators with an endpoint data protection remit
- Security engineers deploying DLP across Windows, macOS, and Chrome
- Copilot deployment teams
- Information security analysts responsible for device-edge controls
Prerequisites
Before enrolling, please ensure you meet these requirements:
- • Completion of Module 2 — Data Protection Practitioners, or equivalent production Purview experience
- • Familiarity with endpoint management and Microsoft Defender for Endpoint
- • Practical understanding of sensitivity labels and DLP policy authoring
- • Awareness of the Privacy Act 1988 and ASD/ACSC Essential Eight controls
- • Access to a Microsoft 365 E5 or Compliance add-on tenant for hands-on labs
Delivery, Format and Logistics
Delivery Mode
One-day intensive (virtual)
One-day intensive — virtual cohort with live lab access (8-16 participants)
What You'll Need
- Access to a Microsoft 365 E5 (or Compliance add-on) tenant for hands-on labs
- Familiarity with Microsoft Defender for Endpoint and device onboarding
- Exposure to endpoint management (Intune or equivalent) and device group scoping
- Completion of Module 2 — Data Protection Practitioners, or equivalent production Purview experience
- Working knowledge of sensitivity labels and DLP policy concepts
What You'll Receive
- 8 hours of instructor-led training in a single intensive day
- Hands-on endpoint DLP labs across Windows and macOS
- USB and network control playbook for removable media and file shares
- Microsoft 365 Copilot DLP policy templates — prompt safeguards and citation controls
- Certificate of completion suitable for CPD claims
Frequently Asked Questions
Not Ready to Enrol?
Join our mailing list to receive updates about courses, resources, and cybersecurity insights tailored for Australian organisations.
Secure payment via Stripe · Promo codes accepted
Next Intake
September 2026 — register your interest at educ4te.com
Format
One-day intensive (virtual)
Group & Enterprise Options
Discounted rates available for teams of 3+ delegates. Contact us for in-house delivery options.
What's Included
- 8 hours of instructor-led training in a single intensive day
- Hands-on endpoint DLP labs across Windows and macOS
- USB and network control playbook for removable media and file shares
- Microsoft 365 Copilot DLP policy templates — prompt safeguards and citation controls
- Certificate of completion suitable for CPD claims
Have questions about this course?