User warnings, comparable to the user safety tips included with EOP, SHOULD be displayed.

Why This Matters

Without user warnings enabled, individuals in your organization may be more susceptible to phishing attacks and malicious email content. These warnings provide critical safety tips that help users identify and avoid suspicious messages. Enabling them reduces the risk of successful social engineering attempts against your users.

What Aether365 Checks

This check verifies that user warnings (similar to the safety tips included with Exchange Online Protection) are enabled for your organization. In the Aether365 dashboard under microsoft-365 checks, this appears as CISA.MS.EXO.11.2.

How to Fix

No specific remediation steps are available for this check at this time. However, you can manually verify and configure user warnings in the Microsoft 365 Defender portal by following these steps: