How to Fix Microsoft 365 Advanced Delivery Phishing Simulation Errors
Question details
The user needs to fix errors encountered when configuring Advanced Delivery Phishing Simulations, including interface failures and PowerShell parameter issues.
- Product
- Microsoft 365 Defender
- Device & OS
- not provided
- Scenario
- Configuring phishing simulation domains, URLs, and IP addresses in the Microsoft 365 Defender portal or via Exchange Online PowerShell.
- Observed behavior
- The Advanced Delivery section fails to load or rejects inputs, and PowerShell commands like New-TenantAllowBlockListItems return 'invalid listsubtype parameter' errors.
Ensure you have the required Security Administrator or Organization Management roles in Microsoft 365, and verify that your Exchange Online PowerShell module is fully up to date.
Verify Permissions and Update PowerShell Modules
Check role assignments and ensure the Exchange Online PowerShell module is current to prevent parameter recognition errors during policy creation.
Microsoft frequently updates Defender and Exchange Online cmdlets to align with Secure by Default changes. Using an outdated PowerShell module often causes parameter errors like the 'listsubtype' issue.
Log in to the Microsoft 365 admin center, navigate to Roles > Role assignments, and confirm your account holds the Security Administrator or Organization Management role.
Open Windows PowerShell as an administrator and execute 'Update-Module -Name ExchangeOnlineManagement' to download the latest available cmdlets.
Run 'Connect-ExchangeOnline' to authenticate with your tenant, then attempt to execute your 'New-TenantAllowBlockListItems' or 'New-PhishSimOverridePolicy' commands again.
Open a Microsoft 365 Admin Support Ticket
If both the web portal and updated PowerShell commands fail, Microsoft backend intervention is required to unblock the Advanced Delivery interface.
Discover WPS Office for a Seamless Document Experience
While troubleshooting complex Microsoft 365 admin portal errors can be time-consuming, your daily document tasks shouldn't be. WPS Office provides a free, lightweight, and highly compatible alternative to Microsoft Word, Excel, and PowerPoint, helping you stay productive regardless of IT issues.
- 1. Download the Installer: Visit the official WPS website and download the free installer for your operating system.
- 2. Install WPS Office: Run the setup file and follow the on-screen prompts to complete the quick installation process.
- 3. Open Your Documents: Launch WPS Office and open your existing Microsoft Office files seamlessly without any loss of formatting.
Frequently Asked Questions
Why does the New-TenantAllowBlockListItems command return an invalid listsubtype error?
This error typically occurs if you are using an outdated version of the Exchange Online PowerShell module, or if Microsoft has rolled out backend updates to Secure by Default policies that temporarily disrupt specific cmdlet parameters.
What are the prerequisites for configuring Advanced Delivery in Microsoft 365?
You must have an active Microsoft Defender for Office 365 Plan 1 or Plan 2 subscription. Additionally, your admin account must be assigned the Security Administrator or Organization Management role to apply simulation overrides.
Can I completely bypass Microsoft 365 Secure by Default settings?
No, you cannot completely bypass Secure by Default protections. However, you can configure third-party phishing simulation campaigns using the Advanced Delivery policy in the Microsoft 365 Defender portal to ensure specific simulated emails are successfully delivered to users.
