Defender for Email Link Scanning Policy Modification

This guide will provide background information on modifying an existing safe links threat policy.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Modifying a Safe Links Threat Policy

1. Navigate to the Safe Links – Microsoft Defender portal, locate and select the policy you wish to alter.
   
2. Upon opening the policy, all the information of the policy will be displayed. Four points of interest will be available to Edit. You can modify the sections as needed.
   
   1. Description: Adjusts non-functional items of the rule, such as the Name or Description of the rule.
      
   2. Users and Domains: Specifies which Users, Groups, or Owned Domains that will be included or excluded from policy enforcement.
      
   3. Protection Settings: Specifies the filters that will be applied to emails for a compliance match.
      
   4. Notifications Settings: Specifies how users will be notified the embedded link is being detonated and will be notified if it has failed.
      
3. Regardless of which section is selected to be Edited, the same redirect to the Edit page will be displayed. This page will display the selected sections current configuration and will allow you to make the necessary adjustments (additions, removals, editing, etc.) Once the necessary adjustments have been configured for the desired section select Save.
   
4. You will be redirected back to the policy overview page, if all the necessary adjustments look correct, select Close to finalize modification process.
   

Need Assistance?