Microsoft 365 includes built-in tools to defend against phishing attempts that use domain and user impersonation, but administrators need to understand how these protections work to avoid unintended ...