You can enable company-wide protection by applying a default security policy to all of the mailboxes of your organization. By default, this security policy is not applied to any mailboxes.
The default security policy has the following settings:
A type of internet fraud aimed at obtaining unauthorized access to users' confidential data.
Programs that are specifically designed to delete, block, modify, or copy data, or to disrupt the performance of computers and/or computer networks. This category includes viruses, worms, Trojans, and other programs used to automatically conduct malicious activity.
Add the [!!Spam] tag to subjects of email messages that are identified as spam.
Unsolicited mass email mailings, most often including advertisements.
Add the [!!Massmail] tag to subjects of email messages that are identified as mass mail.
Email messages that are generally sent by email marketing services in large numbers by subscription and are not detected as spam. For example, newsletters or marketing emails are detected as mass mail.