Security Policy Errors

How to Configure EOP and Microsoft Defender Antispam Policies

Emma Brown Oct 23, 2026 869 views

Question details

The user needs to know how and where to configure antispam and anti-phishing policies for Exchange Online Protection (EOP) and Microsoft Defender for Office 365.

Configuring EOP and Microsoft Defender for Office 365 Antispam Policies

Product: Microsoft Defender for Office 365
Device & OS: not provided
Scenario: Configuring organizational email security, spam-filtering, and anti-phishing rules for a Microsoft 365 tenant.
Observed behavior: The user is seeking clarity on the correct admin portal to use for creating security policies based on their organization's assigned Microsoft 365 licenses.

Before you start

Ensure you are logged into your Microsoft 365 tenant with an account that has Global Administrator or Security Administrator privileges to modify threat policies.

Solution 1Recommended

Configure Antispam Policies via the Microsoft Defender Portal

Use the unified Microsoft Defender portal to create and manage both Exchange Online Protection (EOP) and Defender for Office 365 policies based on your tenant's licensing.

Exchange Online Protection (EOP) provides baseline anti-spam and anti-malware protection, while Microsoft Defender for Office 365 adds advanced safeguards like Safe Attachments and Safe Links. The available features in the portal will automatically adjust based on your active Microsoft 365 subscription.

Access the Defender Portal

Log in to the Microsoft Defender portal (security.microsoft.com) using an account with appropriate security administrator privileges.

Navigate to Threat Policies

On the left navigation pane, go to 'Email & collaboration', select 'Policies & rules', and then click on 'Threat policies'.

Select Anti-spam Settings

Under the Policies section, click on 'Anti-spam' to view your organization's default EOP anti-spam policies.

Create or Modify Policies

Click 'Create policy' to define custom spam filtering rules, or select the default policy to adjust bulk email thresholds and quarantine actions.

Configure Antispam Policies via the Microsoft Defender Portal

License Verification: If you have Microsoft Defender for Office 365 Plan 1 or Plan 2, you will see additional policy options for advanced anti-phishing and Safe Attachments within this same portal.

Free Microsoft Office alternative

Secure and Lightweight Document Management with WPS Office

While Microsoft Defender handles your cloud email security, managing your local files efficiently is just as important. WPS Office is a powerful, free alternative to Microsoft Office that offers a familiar interface, seamless format compatibility, and a lightweight footprint for all your document needs.

1. Download the Installer: Visit the official WPS Office website to download the free installation package for your operating system.
2. Install WPS Office: Run the downloaded file and follow the on-screen instructions to install the lightweight suite.
3. Open Microsoft Formats: Launch WPS Office and directly open your existing Word, Excel, or PowerPoint files without losing any formatting.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx)Lightweight installation that ensures fast performance on any desktop or mobile deviceFamiliar user interface makes migrating from Microsoft Office completely seamlessBuilt-in robust PDF editing toolkit for secure document distribution

microsoft office alternative - wps office

Frequently Asked Questions

What is the difference between Exchange Online Protection (EOP) and Microsoft Defender for Office 365?

EOP is the core security service that provides basic spam and malware filtering for all Microsoft 365 customers. Microsoft Defender for Office 365 is a premium upgrade that adds advanced protection against zero-day threats, advanced phishing, and malicious URLs.

Why can't I see advanced anti-phishing options in my Defender portal?

Advanced anti-phishing and Safe Links/Attachments policies are only visible if your tenant has an active Microsoft Defender for Office 365 Plan 1 or Plan 2 license. Without it, you will only see standard EOP settings.

Do custom antispam policies override the default tenant policy?

Yes. Custom policies always take precedence over the default antispam policy. You can also assign priority levels to multiple custom policies to dictate the exact order in which they are evaluated.

Microsoft Office Security Issues