G
Glam Ledger

What is included in Microsoft ATP?

Author

John Thompson

Published Apr 26, 2026

Feature availability across Advanced Threat Protection (ATP) plans
Feature ATP Plan 1 (formerly ATP standalone) ATP Plan 2 (formerly Threat Intelligence standalone)
ATP for SharePoint, OneDrive and Microsoft Teams Yes Yes
Anti-phishing policies Yes Yes
Real-time reports Yes Yes
Automation, investigation, remediation, and education

Correspondingly, is ATP included in EMS?

Azure Advanced Threat Protection

Azure ATP is the cloud-based version of Advanced Threat Analytics and included with EMS E5, providing all the above features but delivered via Azure.

Beside above, is Microsoft ATP free? Microsoft Defender ATP does not currently have non-profit licensing. However, Windows 10 E5 for non-profits is only $3.30/mo.

Secondly, what does Windows Defender ATP do?

Windows Defender Advanced Threat Protection (ATP) is a Microsoft security product that is designed to help enterprise-class organizations detect and respond to security threats. ATP is a preventative and post-detection, investigative response feature to Windows Defender.

Does Office 365 e3 include ATP?

Office 365 ATP is included in Office 365 Enterprise E5 and Microsoft 365 Business Premium plans, and can be added to several other Exchange and Office 365 subscription plans (like Exchange Online, Business Basic/Standard, and Office 365 Enterprise E1 and E3) for as low as $2.60 CAD/user.

Related Question Answers

What is ATP in Windows 10?

Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) is a unified platform for preventative protection, post-breach detection, automated investigation, and response.

How do you activate ATP?

  1. In the Security & Compliance Center, go to Threat management > Policy > ATP Safe Attachments, and click Global settings.
  2. In the Global settings fly out that appears, go to the Turn on ATP for SharePoint, OneDrive, and Microsoft Teams setting. Move the toggle to the right.

What is ATP in security?

Advanced threat protection (ATP) refers to a category of security solutions that defend against sophisticated malware or hacking-based attacks targeting sensitive data. Advanced threat protection solutions can be available as software or as managed services.

Why is azure ATP?

Initially released in September 2017, Azure ATP helps to detect and investigate advanced attacks and insider threats across on-premises, cloud, and hybrid environments. Using Azure ATP, you can monitor your identity and network traffic, and identify and track any malicious activities in your environment.

How do I turn off ATP scan in Outlook?

You can turn them off by signing in to https://outlook.live.com. Then select Settings > Premium > Security. There's a toggle under Advanced Security that you can use to turn off Safelinks. Note that turning off Safelinks will only affect future messages you receive.

What is EMS Security?

Microsoft Enterprise Mobility + Security (EMS) is an intelligent mobility management and security platform. It helps protect and secure your organization and empowers your employees to work in new and flexible ways.

Is Windows Defender ATP any good?

Compared to the traditional AV solution, Windows Defender ATP provides a much better preventive and detective capability against both commodity and advanced persistent malware threats. Windows defender ATP has a very strong detection capacity in finding suspicious or malicious PowerShell scripts.

What is the difference between Windows Defender and Windows Defender ATP?

Whereas signature-based threat protection is limited to recognizing “known bad” files, Windows Defender ATP watches for unusual behavior that might (or might not) indicate a problem. Essentially, Windows Defender ATP creates and stores events within the core of the operating system.

How does Microsoft ATP work?

Microsoft Office 365 Advanced Threat Protection (ATP) is a cloud-based email filtering service that helps protect your organization against unknown malware and viruses by providing robust zero-day protection, and includes features to safeguard your organization from harmful links in real time.

How do I enable ATP in Windows Defender?

To enable Microsoft Defender ATP
  1. Sign in to the Microsoft Endpoint Manager admin center.
  2. Select Endpoint security > Microsoft Defender ATP, and then select Open the Microsoft Defender Security Center.
  3. In Microsoft Defender Security Center:
  4. Return to Microsoft Defender ATP in the Microsoft Endpoint Manager admin center.

How do you deploy ATP in Microsoft Defender?

Go to the Microsoft Defender ATP online service and sign in. Select Settings, then select Onboarding under the Device management heading. For the operating system, select Windows 10. Choose Microsoft Endpoint Configuration Manager current branch and later for the deployment method.

Is Windows Defender endpoint protection?

A complete endpoint security solution

Microsoft Defender for Endpoint delivers preventative protection, post-breach detection, automated investigation, and response.

Is Windows Defender an antivirus program?

Formerly known as Windows Defender, Microsoft Defender Antivirus still delivers the comprehensive, ongoing, and real-time protection you expect against software threats like viruses, malware, and spyware across email, apps, the cloud, and the web.

How do you know if an ATP defender is running?

If you want to verify the status manually, navigate to HKLMSOFTWAREMicrosoft Windows Advanced Threat ProtectionStatus in the Registry and verify the status of OnboardingState. The value should be 1.

How much does Microsoft Defender cost?

Windows Defender is the malware protection system that is included by default in your Windows 10, has no cost and does not require any subscription.

What is included with Office 365 e3?

Install Office 365 apps, such as Word, Excel, PowerPoint, OneNote (PC only), and Access (PC only), on up to five PCs or Macs, five tablets, and five phones per user. Use Office 365 apps designed for mobile devices and tablets.

Does Microsoft 365 e3 include Azure AD premium?

EMS E3, Microsoft 365 E3, and Microsoft 365 Business Premium includes Azure AD Premium P1. For an improved user experience, upgrade to Azure AD Premium P1 or P2 and use Conditional Access.

What does Office 365 e3 include?

Microsoft 365 includes apps such as Outlook, Word, Excel, and PowerPoint along with services such as Exchange, OneDrive, SharePoint, and Teams. Microsoft 365 combines best-in-class productivity apps with intelligent cloud services to transform the way you work.

Does Office 365 come with project?

The answer is no. None of the Office 365 Plans include subscriptions to Project. You can either purchase subscriptions to Project standalone or you can add them to your existing Office 365 subscription.

What is the difference between Microsoft 365 and Office 365?

There is a difference between Office 365 and Microsoft 365. Office 365 is a set of cloud based business applications like Exchange, Office Apps, SharePoint, OneDrive. Microsoft 365 is Office 365 with Windows 10 (OS) and the Enterprise Mobility Suite (Suite of Security and Management apps).

Does Office 365 e3 include Exchange Online Protection?

Microsoft's Exchange Online Protection (EOP) Explained in Simple Terms. Fortunately, if you use any edition of the Microsoft Office 365 productivity suite that includes Exchange Online (such as Office 365 E1, Office 365 E3, and Office 365 E5), you are protected by the Exchange Online Protection (EOP) by Microsoft.

How do you bypass ATP?

Below are the steps to set up a mail flow rule to bypass ATP Attachment Processing:
  1. Create a new mail flow rule in your Exchange/Office Admin center.
  2. Give the rule a name such as Bypass ATP Attachments.
  3. Click more options.
  4. From the Apply this rule if…
  5. Enter our IP addresses.
  6. From the Do the following…
  7. Click Save.

Does Office 365 e3 include Windows 10?

Microsoft 365 Enterprise includes Office 365 Enterprise, Windows 10 Enterprise, and Enterprise Mobility + Security and is offered in two plans - Microsoft 365 E3 and Microsoft 365 E5. The following Online Services are included in the Microsoft 365 Enterprise suites, available through Volume Licensing.