How to Change Attack Simulation Training Assignment Notification Timing in Microsoft Defender
Question details
Organizations want to delay Microsoft default training assignment notifications so they are sent after an attack simulation has ended, rather than immediately after a user is phished.

- Product
- Microsoft Defender
- Device & OS
- not provided
- Scenario
- Administrators configuring Attack Simulation Training campaigns need to adjust when automated training assignment emails are delivered to users.
- Observed behavior
- Microsoft default training assignment notifications lack built-in delivery preference controls for delaying messages, causing them to be sent immediately upon a failed phishing simulation.
Ensure you have the necessary administrator privileges in the Microsoft 365 Defender portal to view and modify attack simulation settings.
Consult Microsoft Q&A for Advanced Notification Controls
Since default delivery preference controls depend heavily on current product capabilities and built-in templates, Microsoft recommends reaching out to specialized support for advanced timing configurations.
Microsoft Defender's built-in templates may not natively support delaying default assignment notifications until a simulation ends. Consulting Microsoft's expert community can help you find PowerShell workarounds or feature updates.
Open your web browser and go to the official Microsoft Q&A platform at https://learn.microsoft.com/en-us/answers/tags/9/m365.
Click the 'Ask a question' button and ensure you tag your query with 'Microsoft 365 Defender'.
Explain that you need to delay the Attack Simulation Training assignment notifications until the end of the simulation, rather than sending them immediately after a user is phished.

Customize End-User Notifications in the Campaign Wizard
Check if your current tenant's version of Microsoft Defender allows customizing delivery preferences during the simulation campaign setup.
Need a Lightweight Office Suite for Daily Tasks?
While managing complex security policies in Microsoft Defender, you may also need a fast, reliable, and highly compatible office suite for your organizational documents. WPS Office provides a free, seamless alternative to Microsoft Office.
- 1. Visit the WPS Office website: Go to the official WPS website to access the free download page.
- 2. Download the installer: Click the 'Free Download' button to download the lightweight WPS Office installer to your computer.
- 3. Install and open: Run the installer, complete the quick setup, and instantly start creating or editing your Microsoft Office compatible files.

Frequently Asked Questions
Can I completely disable end-user notifications in Attack Simulation Training?
Yes. During the simulation creation wizard, you can select 'No notifications' in the End-user notifications section. However, this is generally not recommended if the goal is to train users.
Why are training assignment notifications sent immediately by default?
Microsoft Defender sends these notifications immediately after a user fails a phishing simulation to provide immediate context, allowing the user to connect the training with their recent action.
Is it possible to use custom email templates for simulations?
Yes. Administrators can create and customize their own end-user notification templates in the Microsoft 365 Defender portal, allowing for specialized branding and tailored messaging instructions.




