Default Anti-phishing with Office 365 ATP for all users ?

Hello Mohan,

The new Anti-Phishing policy is about:

1. Protecting your accepting domains from look-alikes and impersonation attacks

2. Protecting your targeted high profile users from impersonation and look alike attacks.

So in users to Protect, you should specify, you should specify the users/their email addresses that you want to do a impersonation check on

In domains to protect, we already include your accepting domains by default, but you can add other partner domains as well.

Finally, you can configure your action to TIP ( we recommend starting with a tip) and then graduate to junking/quarantine.

You can apply this policy to everyone in your organization.

So for example, you can create a policy that checks against look-alike attacks against your CEO's name and assign that policy to all users in your org (though applied to setting).

Hope this helps.

Thanks,

Abhishek Agrawal, Principal PM Lead, Office 365 [MSFT]