Security Policy Errors

How to Fix Cannot Edit Microsoft 365 Anti-Phishing Policies

Steve K Oct 13, 2026 869 views

Question details

The user is unable to modify phishing and spam policies or change the phishing email threshold in the admin portal.

How to Fix Cannot Edit Microsoft 365 Anti-Phishing Policies

Product: Microsoft 365
Device & OS: not provided
Scenario: A Global Administrator is attempting to update spam and anti-phishing security policies.
Observed behavior: The system throws a client error preventing the administrator from modifying, adding, or saving any changes to the phishing and spam policies.

Before you start

Ensure you are signed in with an account that has active Global Administrator or Security Administrator permissions, and try clearing your browser cache before modifying policies.

Solution 1Recommended

Verify Roles and Update via Microsoft Defender Portal

Confirm your administrative permissions and attempt to modify the policies directly through the dedicated Microsoft Defender portal rather than the general admin center.

Sometimes client errors occur due to portal syncing issues or insufficient role assignments. Managing threat policies directly in the Defender portal ensures you are using the most up-to-date security administration interface.

Sign in to Microsoft Defender

Navigate to security.microsoft.com and log in using your Microsoft 365 Global Administrator or Security Administrator credentials.

Navigate to Threat Policies

In the left-hand navigation pane, expand 'Email & Collaboration', click on 'Policies & Rules', and then select 'Threat policies'.

Access Anti-Phishing Settings

Under the Policies section, click on 'Anti-phishing' to view your current configurations.

Edit the Policy

Select the specific policy you want to modify, click 'Edit protection settings', adjust your phishing email thresholds, and click 'Save'.

Verify Roles and Update via Microsoft Defender Portal

Permission Requirements: If the 'Save' button is grayed out or throws an error, double-check your role assignments in the Microsoft 365 Admin Center to ensure your Security Administrator role is active.

Solution 2

Create a Business Support Request

If the client error persists despite having the correct permissions, you will need to contact Microsoft Support to resolve potential backend tenant issues.

Free Microsoft Office alternative

Looking for a Free, Hassle-Free Office Suite?

While resolving Microsoft 365 admin center errors, you can keep your team productive with WPS Office. It provides powerful, lightweight, and offline-capable document editing without relying on complex cloud security policies.

1. Download WPS Office: Visit the official WPS Office website and click the free download button for your operating system.
2. Install the Software: Run the downloaded installer file and follow the simple on-screen instructions to complete the setup.
3. Start Creating: Open WPS Office to instantly create, edit, and share your documents, spreadsheets, and presentations.

Completely free and lightweight alternative to Microsoft 365Fully compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Familiar user interface ensuring zero learning curve for teamsNo complex administrative cloud policies required for offline work

microsoft office alternative - wps office

Frequently Asked Questions

Why am I getting a client error when changing phishing email thresholds?

This error generally occurs if your admin session has expired, browser cache is corrupted, or there is a temporary backend sync issue in Microsoft 365 preventing policy updates.

Which admin roles can modify Microsoft 365 spam policies?

You must be assigned the Global Administrator or Security Administrator role in the Microsoft 365 admin center to edit, add, or delete anti-spam and anti-phishing policies.

Can I edit these security policies using PowerShell?

Yes, administrators can use Exchange Online PowerShell to modify threat policies using cmdlets like Set-AntiPhishPolicy if the web portal is throwing client errors.

Microsoft Office Security Issues