Our primary use case for Microsoft Purview Data Loss Prevention is mainly for the categorization and classification of data into different classifications, ensuring privacy.
Systems Administrator at TMF Health Quality Institute
Real User
Top 20
Nov 20, 2025
My main use case is to upload mailboxes. We're using Microsoft Purview Data Loss Prevention to upload mailboxes. The migration tool that's built into the Microsoft Hybrid isn't working on our domain. We're a government contractor, so we have policies, and I believe that one of those policies is preventing it from going up. We have two domains. The other one worked fine. The second domain, we weren't able to migrate. So we had to use Microsoft Purview Data Loss Prevention.
System Analyst at a tech services company with 51-200 employees
MSP
Top 10
Nov 5, 2025
I have good hands-on experience with Microsoft Defender, Azure Sentinel, Microsoft Admin portal, Azure portal, and the tools that XDR includes such as Microsoft Defender for EDR and O365. I use all of these tools daily. I have good hands-on experience working with the Face API, which I used in the past six months. I do not use it every day because I work as a cybersecurity analyst. Overall, I have been working with the Face API for some project work spanning eight to ten months.
Our use cases for Microsoft Purview Data Loss Prevention include particularly email egress where we're looking for certain types of data to block, primarily for data exfiltration prevention and to combat malicious traffic. Based on what I've seen, I've anticipated that the use case where we use the most true positives helps us categorize certain emails, allowing us to decide which ones need more attention based on sensitivity, unlike someone's email about marketing.
Solution Architect at a tech services company with 51-200 employees
Real User
Top 5
Jan 2, 2025
I am working on Microsoft Purview Data Loss Prevention for multiple locations like SharePoint, OneDrive, device level, and exchange level. We also use it for on-premises and cloud applications, including Power BI. We have implemented it in multiple locations with different conditions and actions.
A client was interested in Microsoft Purview Data Loss Prevention and Forcepoint LP solutions. They wanted to understand the difference between Microsoft Purview Data Loss Prevention and Forcepoint features.
Learn what your peers think about Microsoft Purview Data Loss Prevention. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
Consultant at a tech services company with 1,001-5,000 employees
Real User
Top 5
Aug 26, 2024
Microsoft Purview Data Loss Prevention is already set up in parallel to Forcepoint. We had some cases where Forcepoint was not able to see the issue, and Purview detected it. With Microsoft Purview Data Loss Prevention, it is much easier to have very good rules. Forcepoint does not have a knowledge of the organization, and you have to set up everything. When you are going to use Microsoft Purview Data Loss Prevention, most of the setup is already done by default as per your needs.
I had different use cases with Microsoft Purview Data Loss Prevention. One of my customers was already working with McAfee DLP, and they migrated from McAfee DLP to Microsoft DLP. I had to do the entire migration and ensure it was working as they expected. They had selected the tool, but I had to ensure it was implemented throughout and tested. It was live in the environment as well. In this case, I implemented Microsoft DLP for four Microsoft services, including OneDrive, Teams, SharePoint, and Exchange email. An endpoint DLP was implemented for the endpoints.
Senior technical consultant at a computer software company with 501-1,000 employees
Consultant
Nov 28, 2023
We do implementations for Endpoint DLP and the cloud-based DLP. It can prevent the exfiltration of documentation, automate the classification of documents, and look for PII. We work on any sensitive information that customers don't want to leave the environment.
We prioritize the control of sensitive data according to our classification, which closely aligns with Microsoft's classification system. Our main goal is to prevent the loss of personal secret data. To achieve this, we focus on specific data types. Our use case involves managing managers who interact with customers. The objective is to limit access to this sensitive data within different departments, allowing some groups to have access while denying it to others. We also control outgoing information through the extension line. The basic use case scenario is as follows: when we receive sensitive personal data from a customer, we classify this information with Microsoft Purview Data Loss Prevention for information protection. The next step involves narrowing down the range of people who can access this data through recording management. The third step is to use DLP to prevent the loss of this personal information through the extension line. The second part of the process deals with the use and storage of this information in OneDrive, SharePoint, and Teams. We label and save it within the perimeter system. Lastly, we implement retention policies and tuition policies to ensure that the controlled path of this information is secure and that it is deleted when necessary.
Solution Architect : Corporate wide systems at a healthcare company with 10,001+ employees
Real User
Jul 11, 2023
We use it for scheduled audit log retrieval on a monthly basis. We have strictly confidential SharePoint sites and requests come in where we have to find out the activity by users, such as who has viewed specific files or pages on a particular site. The logs contain activity by users and are part of Microsoft Purview. We can run search queries against the logs to get user activity across the tenant for a particular, confidential site.
Cyber Security Engineer at a manufacturing company with 10,001+ employees
Real User
Nov 11, 2022
The purpose of the solution is connected to the fact that we use the whole Microsoft suite. We use the DLP mostly, but we also use Defender which comes with the Microsoft license. Up until now, we have used it to investigate everything, what's going on and whether people are sharing data, but mainly for monitoring. There are just a few things that are being blocked right now.
With this product, you can protect your data from getting out of the company, or falling in the wrong hands. You protect your data leakages. It's a very huge subject. It's very important.
We basically use it to track personal identifiable information. We are also using it to label any confidential, company trade secret, and internal data. We have an internal use policy and a confidential use policy to encrypt the documents.
At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.
Our primary use case for Microsoft Purview Data Loss Prevention is mainly for the categorization and classification of data into different classifications, ensuring privacy.
My main use case is to upload mailboxes. We're using Microsoft Purview Data Loss Prevention to upload mailboxes. The migration tool that's built into the Microsoft Hybrid isn't working on our domain. We're a government contractor, so we have policies, and I believe that one of those policies is preventing it from going up. We have two domains. The other one worked fine. The second domain, we weren't able to migrate. So we had to use Microsoft Purview Data Loss Prevention.
I have good hands-on experience with Microsoft Defender, Azure Sentinel, Microsoft Admin portal, Azure portal, and the tools that XDR includes such as Microsoft Defender for EDR and O365. I use all of these tools daily. I have good hands-on experience working with the Face API, which I used in the past six months. I do not use it every day because I work as a cybersecurity analyst. Overall, I have been working with the Face API for some project work spanning eight to ten months.
Our use cases for Microsoft Purview Data Loss Prevention include particularly email egress where we're looking for certain types of data to block, primarily for data exfiltration prevention and to combat malicious traffic. Based on what I've seen, I've anticipated that the use case where we use the most true positives helps us categorize certain emails, allowing us to decide which ones need more attention based on sensitivity, unlike someone's email about marketing.
I am working on Microsoft Purview Data Loss Prevention for multiple locations like SharePoint, OneDrive, device level, and exchange level. We also use it for on-premises and cloud applications, including Power BI. We have implemented it in multiple locations with different conditions and actions.
A client was interested in Microsoft Purview Data Loss Prevention and Forcepoint LP solutions. They wanted to understand the difference between Microsoft Purview Data Loss Prevention and Forcepoint features.
Microsoft Purview Data Loss Prevention is already set up in parallel to Forcepoint. We had some cases where Forcepoint was not able to see the issue, and Purview detected it. With Microsoft Purview Data Loss Prevention, it is much easier to have very good rules. Forcepoint does not have a knowledge of the organization, and you have to set up everything. When you are going to use Microsoft Purview Data Loss Prevention, most of the setup is already done by default as per your needs.
I had different use cases with Microsoft Purview Data Loss Prevention. One of my customers was already working with McAfee DLP, and they migrated from McAfee DLP to Microsoft DLP. I had to do the entire migration and ensure it was working as they expected. They had selected the tool, but I had to ensure it was implemented throughout and tested. It was live in the environment as well. In this case, I implemented Microsoft DLP for four Microsoft services, including OneDrive, Teams, SharePoint, and Exchange email. An endpoint DLP was implemented for the endpoints.
The solution is primarily used for preventing leaks - to protect us from getting information out of the company.
We do implementations for Endpoint DLP and the cloud-based DLP. It can prevent the exfiltration of documentation, automate the classification of documents, and look for PII. We work on any sensitive information that customers don't want to leave the environment.
We prioritize the control of sensitive data according to our classification, which closely aligns with Microsoft's classification system. Our main goal is to prevent the loss of personal secret data. To achieve this, we focus on specific data types. Our use case involves managing managers who interact with customers. The objective is to limit access to this sensitive data within different departments, allowing some groups to have access while denying it to others. We also control outgoing information through the extension line. The basic use case scenario is as follows: when we receive sensitive personal data from a customer, we classify this information with Microsoft Purview Data Loss Prevention for information protection. The next step involves narrowing down the range of people who can access this data through recording management. The third step is to use DLP to prevent the loss of this personal information through the extension line. The second part of the process deals with the use and storage of this information in OneDrive, SharePoint, and Teams. We label and save it within the perimeter system. Lastly, we implement retention policies and tuition policies to ensure that the controlled path of this information is secure and that it is deleted when necessary.
We use it for scheduled audit log retrieval on a monthly basis. We have strictly confidential SharePoint sites and requests come in where we have to find out the activity by users, such as who has viewed specific files or pages on a particular site. The logs contain activity by users and are part of Microsoft Purview. We can run search queries against the logs to get user activity across the tenant for a particular, confidential site.
I use the solution to protect files with personal information.
The purpose of the solution is connected to the fact that we use the whole Microsoft suite. We use the DLP mostly, but we also use Defender which comes with the Microsoft license. Up until now, we have used it to investigate everything, what's going on and whether people are sharing data, but mainly for monitoring. There are just a few things that are being blocked right now.
We use Microsoft Purview Data Loss Prevention for the entire life cycle and not just DLP. That is, we use it for discovery, classification, and DLP.
With this product, you can protect your data from getting out of the company, or falling in the wrong hands. You protect your data leakages. It's a very huge subject. It's very important.
We basically use it to track personal identifiable information. We are also using it to label any confidential, company trade secret, and internal data. We have an internal use policy and a confidential use policy to encrypt the documents.