Preset security policies are policies that provide a centralized location for applying all of the recommended spam, malware, and phishing policies to users at once1. The policy settings are not configurable and are set by Microsoft based on best practices1.
There are two types of preset security policies: Standard protection and Strict protection1. Standard protection is a baseline protection profile that's suitable for most users1. Strict protection is a more aggressive protection profile for selected users who are high value targets or priority users1.
If you want to apply Policy1 to the Executives group, you need to remove them from the Strict protection preset security policy first. Otherwise, the preset security policy will take precedence over Policy1 and prevent it from being applied2.
To remove the Executives group from the Strict protection preset security policy, you can follow these steps2:
Login to the Microsoft Security portal at https://security.microsoft.com.
On the left nav, under Email & collaboration, select Policies & rules.
Select Threat policies.
Select Preset Security Policies underneath the Templated policies heading Select Manage underneath the Strict protection preset.
Select Specific recipients and remove the Executives group from the list of recipients.
Select Save.