Commands › Exchange Online

Enable-EOPProtectionPolicyRule

Exchange Online ExchangeOnlineManagement Enable-*

Turn on the Standard preset security policy or the Strict preset security policy. If your organization has Defender for Office 365, you also need to use the Enable-ATPProtectionPolicyRule cmdlet to turn on the policy.

Quick start script

# Enable-EOPProtectionPolicyRule — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-EOPProtectionPolicyRule
$before | Format-List

# 3. Make the change (dry run first)
Enable-EOPProtectionPolicyRule -Identity <RuleIdParameter> -WhatIf
Enable-EOPProtectionPolicyRule -Identity <RuleIdParameter>

# 4. Verify and diff
$after = Get-EOPProtectionPolicyRule
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Enable-EOPProtectionPolicyRule [-Identity] <RuleIdParameter>
 [-Confirm]
 [-WhatIf]
 [<CommonParameters>]

Parameters (3)

Parameter	Type	Required	What it controls
-Identity	RuleIdParameter	yes	The Identity parameter specifies the rule that you want to enable. You can use any value that uniquely identifies the rule. For example:
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.