Configuring Safe Attachments in ATP


ATP Safe Attachments with ATP Safe Links are part of Office 365 Advanced Threat Protection (ATP). The ATP Safe Attachments feature checks to see if email attachments are malicious and then take action to protect your organization. The ATP Safe Attachments feature protects your organization according to ATP Safe Attachments policies that are set by your Office 365 global or security administrators. ATP protection can also be extended to files in SharePoint Online, OneDrive for Business, and Microsoft Teams.     

People regularly send, receive, and share attachments, such as documents, presentations, spreadsheets, and more. It’s not always easy to tell whether an attachment is safe or malicious just by looking at an email message. And the last thing you want is a malicious attachment to get through, wreaking havoc for your organization.

This blog post shows how you can set up ATP Safe Attachments policies to help ensure that your organization is protected against attacks by unsafe email attachments. 

Go to and sign in with your work or school account.

In the Office 365 Security & Compliance Center, in the left navigation pane, under Threat management, choose Policy > Safe Attachments.

Turn on ATP for SharePoint, OneDrive, and Microsoft Teams,

Choose New (the New button resembles a plus sign ( +)) to start creating your policy.

Specify the name, description, and settings for the policy.

  • In the Name box, type no delays.
  • In the Description box, type a description
  • In the response section, choose the Dynamic Delivery option.

In the Redirect attachment section, select the option to enable redirect and type the email address of your Office 365 global administrator, security administrator, or security analyst who will investigate malicious attachments.

In the Applied To section, choose The recipient domain is, and then select your domain. Choose Add, and then choose OK.

Choose Save.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s