Defender for Office 365 preset security policies

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

• Built-In
• EnableForInternalSenders
• Set-ATPBuiltInProtectionRule

Requirements, exceptions and scope

• GuidanceScopeRecommendation2 passages

  Preset security policies allow you to apply many email protection features to users based on our recommended settings. Unlike custom threat policies that are infinitely…

• What do you need to know before you begin?RequirementExceptionRecommendation5 conditions3 passages
• Use the Microsoft Defender portal to assign Standard and Strict preset security policies to usersRequirementExceptionScope11 conditions6 passages
• Use the Microsoft Defender portal to modify the assignments of Standard and Strict preset security policiesScope2 passages
• Use the Microsoft Defender portal to add exclusions to the Built-in protection preset security policyExceptionScopeRecommendation2 conditions4 passages
• Preset security policies in Exchange Online PowerShellException1 condition1 passage
• Use PowerShell to view individual threat policies in preset security policiesException2 conditions2 passages
• Use PowerShell to view rules for preset security policiesException1 condition1 passage
  Built-In
• Use PowerShell to turn on or turn off preset security policiesException2 conditions2 passages
• Use PowerShell to specify recipient conditions and exceptions for preset security policiesRequirementExceptionScope4 conditions4 passages
  Set-ATPBuiltInProtectionRule
• Profiles in preset security policiesException2 conditions2 passages
• Policy settings in preset security policiesExceptionScopeRecommendation1 condition4 passages
  EnableForInternalSenders
• Order of precedence for preset security policies and other threat policiesRequirementScopeRecommendation1 condition5 passages

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.