Office Support / Office 365 Admin / Domains
Create DNS records for Office 365 at any DNS hosting provider
To confirm that you own a custom domain and then set up Office 365 services, like email, to use the domain, you create several DNS records at your domain's DNS host. The general steps are included in this article. But you may be able to find step-by-step instructions that are specific to that host's website. Check to see if your domain's DNS host is listed in Create DNS records for Office 365.
Why update DNS records? Watch the video
To set up the records yourself, these are the records to add. Note that your verification record and MX record are unique to your domain. To set them up, you'll need to get and use a specific “token” value for your domain. The steps below explain how to do that. (Need help with this? Get support.)
Some DNS hosts don’t let you create all of the required record types, which causes service limitations in Office 365. If your domain's host doesn’t support SRV, TXT, or CNAME records, for example, we recommend that you transfer your domain to a DNS host that does support all required records. For a fast, automated process setting up with Office 365, we recommend that you transfer your domain to GoDaddy.
If you have a SharePoint Online Public Website, you can set it up to use your custom domain for the website URL address, like www.your_domain.com.
Add a TXT or MX record for verification
Before you use your domain with Office 365, we have to make sure that you own it. Your ability to log in to your account at your domain registrar and create the DNS record proves to Office 365 that you own the domain.
-
Sign in to your DNS hosting provider’s website.
-
Choose your domain.
-
Find the page where you can edit DNS records for your domain.
-
Depending on whether you are creating a TXT record or an MX record, do one of the following:
-
If you create a TXT record, use these values:
Record Type
Alias or Host Name
Value
TTL
TXT
Do one of the following: Type @ or leave the field empty or type your domain name.
Note Different DNS hosts have different requirements for this field. MS=msXXXXXXXX
Note This is an example. Use your specific Destination or Points to Address value here, from the table in Office 365.
How do I find this?Set this value to 1 hour or to the equivalent in minutes (60), seconds (3600), etc.
-
If you create an MX record, use these values:
Record Type
Alias or Host Name
Value
Priority
TTL
MX
Type either @ or your domain name.
MS=msXXXXXXXX
Note This is an example. Use your specific Destination or Points to Address value here, from the table in Office 365.
How do I find this?For Priority, to avoid conflicts with the MX record used for mail flow, use a lower priority than the priority for any existing MX records.
For more information about priority, see What is MX priority?
Set this value to 1 hour or to the equivalent in minutes (60), seconds (3600), etc.
-
-
Save the record.
Now that you've added the record at your domain registrar's site, you'll go back to Office 365 and request Office 365 to look for the record.
When Office 365 finds the correct TXT record, your domain is verified.
-
On the Manage domains page, select the domain that you are verifying and then, in the Action column for that domain, choose Start setup.
-
On the Add this TXT record to show you own domain_name page, choose Okay, I've added the record.
-
Choose Next.
Add MX record to route email
Add an MX record so email for your domain will come to Office 365.
|
Task |
|
Find the page where you can create records for your domain.
|
|
The MX record you'll add includes a value (the Points to address value) that looks something like this: <MX token>.mail.protection.outlook.com, where <MX token> is a value like MSxxxxxxx.
|
|
Remove any other MX records. If you have any MX records for this domain that send email to someplace other than Office 365, delete them all. |
Add four CNAME records
Follow the steps below to add the four CNAME records that are required for Office 365. If additional CNAME records are listed in Office 365, add those following the same general steps shown here.
On your DNS host’s website, you'll create four new CNAME records, typically one at a time.
-
In the boxes for each new record, type or copy and paste the following values. After you add each of the first three new records, choose to create another CNAME record.
Record Type
Host
Points to
TTL
CNAME (Alias)
autodiscover
autodiscover.outlook.com
1 hour
CNAME (Alias)
lyncdiscover
webdir.online.lync.com
1 hour
CNAME (Alias)
msoid
clientconfig.microsoftonline-p.net
1 hour
CNAME (Alias)
sip
sipdir.online.lync.com
1 hour
Note For TTL: Set this value to 1 hour or to the equivalent in minutes (60), seconds (3600), etc. -
When you've finished, save the records.
Add two CNAME records for Mobile Device Management (MDM) for Office 365
|
Record Type |
Host |
Points to |
TTL |
|
CNAME (Alias) |
enterpriseregistration |
enterpriseregistration.windows.net |
1 hour |
|
CNAME (Alias) |
enterpriseenrollment |
enterpriseenrollment.manage.microsoft.com |
1 hour |
Add a TXT record for SPF to help prevent email spam
On your DNS host’s website, create a new TXT record.
-
In the boxes for the new record, type or copy and paste the following values.
Record Type
Host
TXT Value
TTL
TXT (Text)
@
v=spf1 include:spf.protection.outlook.com -all
Note We recommend copying and pasting this entry, so that all of the spacing stays correct. 1 hour
Note For TTL: Set this value to 1 hour or to the equivalent in minutes (60), seconds (3600), etc. -
When you've finished, save the record.
Add two SRV records
On your DNS host’s website, you'll create two new SRV records, typically one at a time. That is, after you add the first SRV record at the website, choose to create another SRV record.
-
In the boxes for each new record, type or copy and paste the following values. (See the notes below for creating SRV records when your DNS host doesn't have all of these as separate fields.)
Record Type
Name
Target
Protocol
Service
Priority
Weight
Port
TTL
SRV (Service)
@
(Or leave blank, if @ is not allowed)
sipdir.online.lync.com
_tls
_sip
100
1
443
1 hour
SRV (Service)
@
(Or leave blank, if @ is not allowed)
sipfed.online.lync.com
_tcp
_sipfederationtls
100
1
5061
1 hour
Notes -
For Name: If your DNS host doesn't allow setting this to @, leave it blank. Use this approach only when your DNS host has separate fields for the Service and Protocol values. Otherwise, see the Service and Protocol notes below.
-
For Service and Protocol: If your DNS host doesn't provide these fields for SRV records, you must specify the Service and Protocol values as the record’s Name value. (Note: Depending on your DNS host, the Name field might be called something else, like: Host, Hostname, or Subdomain.) To set up the combined value, you create a single string, separating the values with a dot.
For example: Name: _sip._tls
-
For Priority, Weight, and Port: If your DNS host doesn't provide these fields for SRV records, you must specify them as the record’s Target value. (Note: Depending on your DNS host, the Target field might be called something else, like: Content, IP Address, or Target Host.) To set up the combined value, you create a single string, separating the values with spaces. The values must be included in this order: Priority, Weight, Port, Target.
For example: Target: 100 1 443 sipdir.online.lync.com
-
Variation for Priority, Weight, and Port: Some DNS hosts provide some, but not all, of the required fields separately. For these DNS host sites, specify the values that aren't shown separately as a combined string, in order, for the record’s Target value. (Note: Depending on your DNS host, the Target field might be called something else, like: Content, IP Address, or Target Host.) To set up the combined value, you create a single string for the fields that aren't shown individually, separating the values with spaces. The values must be included in order, leaving out the values that have separate fields available: Priority, Weight, Port, Target.
For example, when Priority has a separate field, concatenate only the Weight, Port, and Target values: Target: 1 443 sipdir.online.lync.com
-
For TTL: Set this value to 1 hour or to the equivalent in minutes (60), seconds (3600), etc.
-
-
When you've finished, save the records.
More about updating DNS records
If you know how to update DNS records at your domain's DNS host, use the Office 365 DNS values to edit records at your domain's DNS host, for example, to set up an MX record or SPF record. Find the specific values to use by following these steps, or view them in the domains setup wizard as you step through it.
If you need some help figuring out how to add the required DNS records and your DNS host isn't listed in Create DNS records for Office 365, first gather the information you need to create Office 365 DNS records. Then use the general steps in this topic to set up your domain's DNS records so you can use your domain with Office 365 services, like email.
If you don't have a website that you use with your custom domain, you can have Office 365 set up and manage DNS records for your domain instead of doing all the setup yourself. Learn about the two options for setting up and managing DNS records for a custom domain in Office 365.
Still need help?

