Safe Attachments (P1)
Sandbox detonation of email attachments with Dynamic Delivery, custom Safe Attachments policies per recipient group, and quarantine handling. Bundled with M365 Business Premium and configured against tenant baseline.
Defender for Office 365 · Abu Dhabi
Microsoft Defender for Office 365 P1 vs P2 — Abu Dhabi
Emirtech deploys and tunes Microsoft Defender for Office 365 (MDO) — Plan 1 and Plan 2 — for Abu Dhabi and Al Ain tenants, covering Safe Attachments, Safe Links, anti-phishing policies and the Plan 2 hunting, simulation and AIR features. We are an Abu Dhabi contractor (ADMCC-approved for security systems), not a Microsoft Solutions Partner-tier Security specialist.
Get a free site survey Talk to a specialist
Free Site Survey
Control4 installer
Since 2018
Honest Scope
In short: This guide covers “Microsoft Defender for Office 365 P1 vs P2” for businesses in Abu Dhabi and Al Ain. It is written by Emirtech, an independent integrator. For a specific site, a survey or assessment comes first, then a written itemised quotation.
Microsoft Defender for Office 365 P1 vs P2: key facts
| Published by | Published by Emirtech Technology, an independent integrator in Mussafah, Abu Dhabi, in operation since 2018. |
|---|---|
| Where? | Abu Dhabi and Al Ain, served from Emirtech's Mussafah, Abu Dhabi base; there is no Al Ain office. In Dubai: IT AMC and time attendance by scheduled on-site visits, gate barriers, ANPR, video intercoms and turnstiles by Emirtech itself; CCTV, alarm and access control through SIRA-approved partners, with Emirtech coordinating. |
| Survey and quotation | Emirtech publishes no price list: it surveys or assesses first and then gives a written, itemised quotation. |
| Credentials | Emirtech is an independent systems integrator. It holds no manufacturer-level credential of its own, and its ADMCC approval covers security systems only, not IT services. It claims no partner status with the vendors named on this page. Product brands named on this page are trademarks of their owners. |
| Last reviewed | 21 October 2026 |
What does Emirtech deliver for Defender for Office 365 P1 and P2 in Abu Dhabi?
Emirtech is an Abu Dhabi contractor (ADMCC-approved for security systems) founded in 2018, operating from M44, Mussafah Industrial Area, Abu Dhabi, and reachable on +971 55 651 7843. We deploy and tune Microsoft Defender for Office 365 (MDO) across Abu Dhabi and Al Ain tenants — both Plan 1 (P1), which is bundled with Microsoft 365 Business Premium and adds Safe Attachments, Safe Links, anti-phishing policies with mailbox-intelligence impersonation protection, Spoof Intelligence, real-time threat detection, the Tenant Allow/Block List and Quarantine policies; and Plan 2 (P2), which is included with Microsoft 365 E5 / E5 Security and adds Threat Explorer (Threat Investigation), Advanced Hunting KQL across MDO + MDE + MDI + MDCA in the unified Microsoft Defender XDR portal, Attack Simulation Training (built-in phishing simulation — see our separate page for the KnowBe4 alternative), and Automated Investigation & Response (AIR) playbooks. Typical engagements include preset security policies (Standard / Strict) configuration, custom Safe Attachments policies with Dynamic Delivery, Safe Links policies covering URLs in email, Teams and Office apps, anti-phishing protection with user and domain impersonation rules, DKIM signing per accepted domain, alignment with SPF and DMARC records, and Quarantine notification tuning. We coordinate licensing through authorised Microsoft distributors in the UAE and document the configuration baseline for handover. Our honest scope: we deploy, configure and tune MDO P1/P2; we are not a Microsoft Solutions Partner-tier specialised partner of the Security solution area, not a Microsoft FastTrack-Ready Partner, and not a 24/7 SOC operator. We do not hold SIRA (Dubai), ISO 27001, NESA, ADHICS or PDPL certification. Abu Dhabi and Al Ain are our priority areas, and in Dubai: IT AMC and time attendance by scheduled on-site visits, gate barriers, ANPR, video intercoms and turnstiles by Emirtech itself, and CCTV, alarm and access control through SIRA-approved partners, with Emirtech coordinating; we do not mobilise to Sharjah or the Northern Emirates. To request a P1 vs P2 design, a Secure Score uplift review or a quotation, call +971 55 651 7843 or email [email protected].
Defender for Office 365 — capabilities we deploy
P1 and P2 feature deployment
Safe Links (P1)
URL rewriting and time-of-click verification for email, Microsoft Teams and Office desktop/web apps. Custom Safe Links policies, do-not-rewrite lists and click-tracking enabled per user group across Abu Dhabi tenants.
Threat Explorer + Hunting (P2)
Threat Explorer (Threat Investigation) for email and Teams telemetry, plus Advanced Hunting KQL across MDO, Defender for Endpoint, Defender for Identity and Defender for Cloud Apps in the unified XDR portal.
AIR + Attack Simulation (P2)
Automated Investigation & Response playbooks for phishing, malware and compromised mailbox alerts, plus Attack Simulation Training campaigns built into MDO P2 — KnowBe4 covered on a separate page.
Defender for Office 365 deployment checklist — Abu Dhabi tenants
We start with a tenant assessment, map your current Exchange Online Protection (EOP) baseline against MDO P1 or P2 capability, agree the preset policy posture (Standard / Strict / Custom), then deploy, tune and document. To scope a Defender for Office 365 P1 vs P2 design across Abu Dhabi or Al Ain, call +971 55 651 7843 or request a free Defender for Office 365 consultation.
- Confirm tenant SKU and licence mix (Business Premium for P1, E5 / E5 Security for P2, or MDO P2 add-on)
- Apply Standard or Strict preset security policies as baseline, with custom exceptions documented
- Configure Safe Attachments policy with Dynamic Delivery, or Block as the action for detected malware
- Enable Safe Links for Email, Teams and Office 365 apps with do-not-rewrite list
- Tune anti-phishing policy — user impersonation, domain impersonation, mailbox intelligence
- Enable DKIM signing for each accepted domain and align with existing SPF and DMARC records
- Configure Tenant Allow/Block Lists and review Quarantine policies + end-user notifications
- Set up Threat Explorer saved queries and Advanced Hunting KQL examples (P2)
- Enable AIR (Automated Investigation & Response) playbooks and review alert tuning (P2)
- Plan Attack Simulation Training campaigns (P2) or hand off to KnowBe4 (separate page)
- Document configuration baseline, exclusions and quarantine release workflow
- Handover to in-house IT or co-managed support with an agreed review schedule
Why Abu Dhabi tenants engage Emirtech for MDO
Local deployment, honest scope
Abu Dhabi + Al Ain coverage
On-site assessment and configuration workshops across Abu Dhabi Island, Mussafah, Khalifa City, Yas, Reem, Saadiyat and Al Ain. Engineers dispatched from our M44 Mussafah workshop with documented site visit reports.
ADMCC-approved contractor
ADMCC-approved (Abu Dhabi Monitoring and Control Centre) for CCTV and security systems since 2018; site works and structured cabling that may accompany Microsoft 365 security rollouts are delivered by the same engineering team.
P1 vs P2 sizing
Honest licence sizing — when M365 Business Premium (P1) is sufficient versus when E5 Security or the MDO P2 add-on is justified by Threat Explorer, Advanced Hunting and AIR requirements. Coordinated via authorised UAE distributors.
Documented baseline
Every engagement closes with a baseline document — preset policy state, custom Safe Attachments / Safe Links / anti-phishing policies, DKIM status, quarantine policy, and a runbook for Threat Explorer review and quarantine release.
Scope — what we deliver and explicitly do not
Emirtech keeps Microsoft Defender for Office 365 engagements scoped honestly. We deploy, configure and tune MDO P1 and P2 inside Microsoft 365 tenants for Abu Dhabi and Al Ain organisations. We do not overstate our role.
- We deliver: Defender for Office 365 P1 and P2 deployment — preset security policies, Safe Attachments with Dynamic Delivery, Safe Links across Email/Teams/Office apps, anti-phishing impersonation policies, DKIM signing, Tenant Allow/Block Lists, quarantine policy tuning, Threat Explorer saved queries, Advanced Hunting KQL examples, AIR playbook review and Attack Simulation campaigns (P2).
- We do not deliver: 24/7 Security Operations Centre monitoring, managed detection and response (MDR), incident-response retainers, Microsoft Sentinel SIEM build-out as a specialised practice, custom Logic Apps / Power Automate playbooks beyond standard AIR, or forensic investigation of breached mailboxes.
- We are not: a Microsoft Solutions Partner-tier specialised partner of the Security solution area, a Microsoft FastTrack-Ready Partner, an authorised Microsoft distributor, or a 24/7 SOC operator.
- We are not affiliated with: Microsoft Corporation, Microsoft Solutions Partner-tier Security partners, authorised Microsoft distributors in UAE, Proofpoint Email Protection, Mimecast Email Security, Barracuda Email Security, or KnowBe4 (we cover the awareness-training alternative on a separate page).
- Abu Dhabi and Al Ain are our priority areas, and in Dubai: IT AMC and time attendance by scheduled on-site visits, gate barriers, ANPR, video intercoms and turnstiles by Emirtech itself, and CCTV, alarm and access control through SIRA-approved partners, with Emirtech coordinating; we do not mobilise to Sharjah or the Northern Emirates.
- Credentials we do not hold: SIRA (Dubai), ISO 27001, NESA, ADHICS, PDPL certification — these are not required for MDO deployment but are listed for transparency.
- Licensing is coordinated through authorised Microsoft distributors in the UAE; we do not invoice Microsoft subscriptions directly unless agreed under a CSP arrangement.
- Engagements are fixed-scope statements of work — baseline deployment, tuning, or a follow-up review — not open-ended managed services.
This scope keeps the engagement defensible: Microsoft 365 security configuration delivered by an Abu Dhabi contractor (ADMCC-approved for security systems), with the limits of our role and credentials stated up front.
Common questions
FAQs
What is the difference between Defender for Office 365 P1 and P2?
P1 (bundled with M365 Business Premium) covers Safe Attachments, Safe Links, anti-phishing with impersonation protection, Spoof Intelligence, real-time threat detection, Tenant Allow/Block List and Quarantine policy. P2 (included with E5 / E5 Security, or as an add-on) adds Threat Explorer (Threat Investigation), Advanced Hunting KQL across MDO + MDE + MDI + MDCA, Attack Simulation Training and Automated Investigation & Response (AIR). We help you size which plan your Abu Dhabi tenant actually needs.
Do I need MDO P2 if I already have KnowBe4 for phishing simulation?
Not necessarily for the simulation feature alone — Attack Simulation Training in MDO P2 overlaps with KnowBe4. P2 is typically justified by Threat Explorer, Advanced Hunting and AIR; you can then choose between MDO Attack Simulation and KnowBe4 based on content library, reporting and existing investment. We cover the KnowBe4 alternative on a separate page.
Is Emirtech a Microsoft Solutions Partner for Security?
No. Emirtech is an Abu Dhabi contractor (ADMCC-approved for security systems) that deploys Defender for Office 365 commercially via authorised UAE channels. We are not a Microsoft Solutions Partner-tier specialised partner of the Security solution area, not a Microsoft FastTrack-Ready Partner, and not an authorised Microsoft distributor. Licensing is coordinated through authorised distributors in the UAE.
Do you operate a 24/7 SOC for Defender alerts?
No. We are not a 24/7 SOC operator. We deploy and tune MDO P1 / P2, configure AIR playbooks (P2) and document Threat Explorer review workflows for your in-house IT or co-managed support. We do not provide managed detection and response (MDR) or incident-response retainer services.
Which areas do you cover?
Abu Dhabi and Al Ain are our priority areas — including Abu Dhabi Island, Mussafah, Khalifa City, Yas Island, Reem Island, Saadiyat Island and Al Ain. In Dubai: IT AMC and time attendance by scheduled on-site visits, gate barriers, ANPR, video intercoms and turnstiles by Emirtech itself, and CCTV, alarm and access control through SIRA-approved partners, with Emirtech coordinating, and we do not mobilise to Sharjah or the Northern Emirates. Our workshop is at M44, Mussafah Industrial Area, Abu Dhabi.
How do I get a quote for Defender for Office 365 P1 or P2 deployment?
Call +971 55 651 7843 or email [email protected] for a tenant assessment. You can also request a free Defender for Office 365 consultation and we will scope P1 vs P2 sizing, preset policy posture, Safe Attachments and Safe Links configuration, anti-phishing tuning, DKIM/SPF/DMARC alignment and a documented baseline for your Abu Dhabi or Al Ain tenant.
Defender for Office 365 · Abu Dhabi
Talk to an Abu Dhabi specialist
Free site survey · transparent scope · honest costs · ADMCC-approved for security systems · Mussafah M44 home base since 2018.
Need a free Abu Dhabi site visit? Call +971 55 651 7843 or email [email protected] — we reply the same working day across Abu Dhabi and Al Ain.