The Short Version
- Apply the Standard preset to everyone and the Strict preset to executives and finance.
- Build a custom anti-phishing policy that names your key people and owned domains.
- Turn on mailbox intelligence and set quarantine as the action for impersonation hits.
- Work the quarantine and submissions queues weekly to train the system.
Bottom line: Most of Defender for Office 365 does nothing until you turn it on and point it at your users, so apply the presets and add one custom anti-phishing policy.
Loading article…