Knowledgebase

To get started you will need to browser windows open: Microsoft Admin Center and your domain DNS.

When setting up your domain to use Microsoft 365 you will need to verify that you are authorised to access the domain. To do this you will need to place a TXT record on your root domain. Firstly, Sign in to your Admin Center and navigate to Show All => Settings => Domains  . 

In a separate browser tab sign in to your web hosting account  , then to access your DNS settings via Services => My Services => Select the hosting package you want to work on => then "Login to cPanel". Once in cPanel look for the "Zone Editor" under the DNS section.

Verification (TXT)

The first record that you will need to add is unique for your Microsoft account and will be in the format below

Mail Exchange (MX)

If you are ready for your emails to be routed to Microsoft, each domain provisioned onto Microsoft365 is allocated a unique MX record which will need to be added to your cPanel DNS ensuring that you overwrite the existing record.

At this point, within cPanel, you will also need to navigate to the "Email Routing" screen to switch your settings to "Remote". This will ensure that any email generated by your website are also routed to Microsoft. You can read more about email routing in cPanel here  .

CNAME

To enable other services within your Microsoft365 account you will need to create their respective CNAME records to ensure correct functionality.

You only need to add the records for the services you wish to use, however we recommend to add them all which will allow you to turn the services on and off within the Microsoft portal as you need them

Sender Policy Framework (TXT)

To ensure correctly authenticate emails against your domain you will need to adjust your Sender Policy Framework to allow Microsoft to send emails on behalf of your domain. 

Microsoft's default recommendation is to just allow their service with "v=spf1 include:spf.protection.outlook.com -all" however this could mean that any emails generate directly on your website e.g. contact form, sales invoices, etc. would not be correctly covered. We recommend adding "+a" which will allow any any service that has an A Record on your domain to send emails. Alternatively, if you are using a website proxy service like Cloudflare, you may wish to allow the webserver IP address directly with "+ip4:xxx.xxx.xxx.xxx" or "+ip6:xxxx:xxxx:xxxx:xxxx/64" where x is replaced by the actual value of your webserver.

Teams / Skype for Business (SRV)

Lastly, for Teams / Skype for Business you will need to add two SRV records