Connect a Domain to Your Microsoft 365
This article outlines how to configure all necessary DNS records for using Exchange Online email from Vodien's Microsoft 365. Proper DNS setup is essential for verifying domain ownership, securing your email communications, ensuring reliable mail delivery, and enabling seamless integration with supported email clients and Microsoft 365 services.
To activate and secure Exchange Online email, you must add the following DNS records to your domain’s DNS settings:
DNS for domain verification (required)
| Name / Host / Alias | Record Type | TXT Value | Note |
|---|---|---|---|
<yourdomain.com> |
|
<MS=ms12345678> |
There should only be one TXT record with domain verification code for <yourdomain.com> |
DNS for mailbox activation (required)
| Name / Host / Alias | Record Type | Priority | Value / Destination / MX Server / Target | Note |
|---|---|---|---|---|
<yourdomain.com> |
|
|
<yourdomain-com.mail.protection.outlook.com> |
There should only be one MX record for <yourdomain.com> |
DNS for automatic email client setup (optional)
| Name / Host / Alias | Record Type | Points to address / Target | Note |
|---|---|---|---|
autodiscover.<yourdomain.com> |
|
autodiscover.outlook.com |
There should only be one MX record for autodiscover.<yourdomain.com> |
DNS for email spam protection (optional but highly recommended)
| Name / Host / Alias | Record Type | Points to address / Target | Note |
|---|---|---|---|
<yourdomain.com> |
|
v=spf1 include:spf.protection.outlook.com -all |
There should only be one TXT record for <yourdomain.com> with v=spf format |
selector1._domainkey.<yourdomain.com> |
|
selector1-<your-domain-with-dashes>._domainkey.<tenant>.onmicrosoft.com |
There should only be one CNAME record for selector1._domainkey.<yourdomain.com> |
selector2._domainkey.<yourdomain.com> |
|
selector2-<your-domain-with-dashes>._domainkey.<tenant>.onmicrosoft.com |
There should only be one CNAME record for selector2._domainkey.<yourdomain.com> |
DNS for other Microsoft 365 services
| Name / Host / Alias | Record Type | Points to address / Target | Note |
|---|---|---|---|
enterpriseregistration.<yourdomain.com> |
|
enterpriseregistration.windows.net |
Required for Microsoft Entra ID device registration
|
enterpriseenrollment.<yourdomain.com> |
|
enterpriseenrollment-s.manage.microsoft.com |
Required for Microsoft Intune / MDM enrollment
There should only be one CNAME record for enterpriseenrollment.<yourdomain.com> |
Instructions for specific DNS zone
The process for adding these records depends on where your DNS is managed. Use the instructions that match your DNS zone:
General steps
Follow these steps if your DNS is hosted with another provider.
- Go to the DNS settings of your domain.
- Add the required DNS records.
- Wait for the changes to take effect. DNS update may take up to 72 hours to work.