Others

How to Customize the Microsoft Defender Attack Simulator Landing Page

Camila Milosovich Oct 9, 2026 870 views

Question details

The administrator wants to configure an Attack Simulator campaign to bypass the default educational page and direct users straight to a custom landing page.

How to Customize the Microsoft Defender Attack Simulator Landing Page

Product: Microsoft Defender
Device & OS: not provided
Scenario: Running a drive-by URL campaign in Microsoft Defender Attack Simulator.
Observed behavior: The campaign opens a default educational page before showing the administrator's custom landing page.

Before you start

Ensure you have Security Administrator or Global Administrator privileges in the Microsoft 365 Defender portal to modify Attack Simulator campaigns and landing pages.

Solution 1Recommended

Configure Custom Landing Pages in Microsoft 365 Defender

Use this method to create and assign a custom landing page directly within the Attack simulation training settings.

Microsoft Defender allows administrators to create custom landing pages for phishing and drive-by URL campaigns. While some default educational intercepts are built-in by design for user training, you can heavily customize the landing experience.

Access Attack Simulation Training

Log in to the Microsoft 365 Defender portal. In the left navigation pane, go to Email & Collaboration and select Attack simulation training.

Navigate to Landing Pages

Click on the Content library tab, then select Landing pages from the available options to view the list of existing pages.

Create a Custom Landing Page

Click on 'Create a landing page'. Enter a name and description, then use the rich text editor or HTML code to design your custom layout.

Assign to Your Campaign

When creating a new drive-by URL campaign, reach the 'Select a landing page' step in the wizard and choose your newly created custom landing page instead of the Microsoft defaults.

Configure Custom Landing Pages in Microsoft 365 Defender

Default Educational Page Limitations: Depending on your specific Microsoft 365 license and current platform updates, completely bypassing the initial educational intercept for certain payloads may be restricted by Microsoft's default security training behavior.

Solution 2

Consult Microsoft Enterprise Forums for Advanced Configurations

Use this approach if the standard portal options do not allow you to completely remove the default educational intercept page.

Free Microsoft Office alternative

Secure and Manage Your Documents with WPS Office

While advanced security campaigns require specialized tools like Microsoft Defender, handling your everyday documentation shouldn't be complicated or expensive. WPS Office provides a lightweight, secure, and highly compatible alternative to Microsoft Office, ensuring your enterprise documents remain safe and easy to manage.

1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the downloaded installer and follow the quick on-screen instructions to set up the software.
3. Open and Edit Securely: Launch WPS Office to instantly open, edit, and secure your Microsoft Office compatible files.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Lightweight installation that doesn't consume excessive system resources.Built-in PDF editing and document security features.Familiar user interface for zero learning curve.

microsoft office alternative - wps office

Frequently Asked Questions

Can I completely remove the default educational page in Microsoft Defender Attack Simulator?

Microsoft often enforces the default educational page to ensure baseline user awareness during simulations. While you can customize the landing page heavily, entirely bypassing the initial intercept depends on the specific payload type and current Microsoft Defender policies. Consulting Microsoft support is recommended for strict bypass requirements.

What permissions are required to create custom landing pages?

You must be assigned the Security Administrator, Attack Simulation Administrator, or Global Administrator role in Microsoft Entra ID (formerly Azure AD) to create and modify campaigns and landing pages in the Microsoft 365 Defender portal.

Why is my custom landing page not displaying properly?

If you used custom HTML to design your landing page, ensure that it does not contain unsupported scripts or external resources blocked by Microsoft's security policies. Preview the page within the Content library to verify its appearance before launching the campaign.

Office Quick Solutions