Standalone Exchange Online Protection

Exchange Online Protection (EOP) is the cloud-based filtering service that helps protect your organization against spam and malware. EOP is included in all Microsoft 365 organizations with Exchange Online mailboxes. For more information, see Exchange Online Protection overview.

However, EOP is also available in the following on-premises scenarios:

  • In a standalone scenario: EOP provides cloud-based email protection for your on-premises Exchange organization or for any other on-premises SMTP email environment.
  • In a hybrid deployment: EOP can be configured to protect your on-premises Exchange environment and control mail routing when you have a mix of on-premises and cloud mailboxes. For more information about hybrid, see Exchange Server hybrid deployments.


If you have an on-premises Exchange organization and you've purchased additional Exchange Enterprise CAL with Services licenses, EOP is part of the included services. EOP in this environment also includes Data loss prevention (DLP).

In these scenarios, EOP can simplify the management of your email environment and alleviate many of the burdens that come with maintaining on-premises hardware and software.

The EOP articles in this node are targeted for on-premises email and hybrid scenarios.

To learn more about EOP, check out the Exchange Online Protection service description.


Set up your standalone EOP service

Best practices for configuring standalone EOP

Exchange admin center in standalone EOP

Protect on-premises mailboxes in China with standalone EOP


Permissions in Exchange Online (and EOP)

Manage role groups in Exchange Online (and EOP)


Manage recipients in standalone EOP

Manage mail users in Exchange Online (and EOP)


Auditing reports in standalone EOP

View the admin audit log

Run an administrator role group report


Configure EOP to deliver spam to Junk Email folders in hybrid environments


Sample script for applying standalone EOP settings to multiple tenants