Defender for Email Policy Attachment Scanning Exception

This guide will show an administrator how to exempt a desired internal user, group, or custom domain from having a Safe Attachments policy applied to their mail.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Defender Email Policy Attachment Scanning Exclusion

  1. Navigate to the Safe Attachments – Microsoft Defender portal, locate and select the Security Essentials Safe Attachments policy or the Equivalent Existing Custom Safe Attachments Threat Policy. A flyout will be displayed showing all applicable security settings, locate the Users and domains section and select the Edit action to begin the exception process.
  2. Check the Exclude These Users, Groups, and Domains box. Input the desired type of exclusion you wish to make, which will exempt those items from having the policy applied to them, followed by clicking Save.

Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.