Do all users need plan 2 to run attack simulation?

Question

We're wanting to run the in built Attack Simulation training built into 365 Defender. Everyone on site is currently on 365 business standard accounts. Would we need to purchase everyone a plan 2 for Windows Defender or could we just upgrade 2 accounts and run the attack simulations from there for the rest of the other users?

Thanks

Answer 1

Dear Chris Prime,

Good day. After thorough research and consulting, it’s been concluded that to run Attack Simulation in Microsoft 365 Defender, users need to have a Microsoft 365 E5 or Microsoft 365 E5 Security license, which includes Windows Defender Advanced Threat Protection (ATP) Plan 2. So Yes! Reference: Get started using Attack simulation training | Microsoft Learn

Therefore, if you want all users to be able to run Attack Simulation, you would need to purchase a Microsoft 365 E5 or Microsoft 365 E5 Security license for each user. Alternatively, you could upgrade two accounts to Microsoft 365 E5 or Microsoft 365 E5 Security and use those accounts to run the Attack Simulation for the rest of the users.

However, please note that this may not be the most cost-effective solution, and you should consult with a Microsoft representative to determine the best licensing option for your organization.

Please let me know if this information was helpful and if you have other concerns, please do not hesitate to add you post in the Microsoft Community Team.

Thank you for choosing Microsoft as your partner in business. 

Sincerely,

Eben |Community moderator

Answer 2

Hello Chris Prime

Good day. Thank for posting in the community.

We've received your query and you can expect to receive response from one of our community moderator accordingly.

At this point, we appreciate your patience and cooperation. Thank you.

Sincerely,

Community moderator