# Microsoft 365 Email Setup on Your Domain

Source: https://dijituldns.co.uk/microsoft-365-email-setup/
Updated: 2026-10-18

> dijitul sets up Microsoft 365 email on your domain: domain verification, the MX record, autodiscover, SPF, DKIM and DMARC. You pay Microsoft's own per-user price; our set-up is £45 an hour + VAT, or a fixed quote when mailboxes need moving. Your website can stay wherever it is hosted.

Price: £45 an hour + VAT

## Key facts

- You pay Microsoft's own per-user price; dijitul set-up is £45 an hour + VAT
- Domain verified with an MS=ms TXT record
- MX value copied exactly from the Microsoft 365 admin centre
- Autodiscover CNAME to autodiscover.outlook.com
- SPF include: spf.protection.outlook.com
- DKIM via two CNAMEs: selector1._domainkey and selector2._domainkey

## When Microsoft 365 makes sense

Microsoft 365 is the natural choice if your business runs on Outlook, Word, Excel and Teams. It adds shared calendars, OneDrive and SharePoint storage, and [shared mailboxes](https://dijituldns.co.uk/shared-and-group-mailboxes/) with proper permissions, all tied to one sign-in per user.

It is not always needed. A small team that only sends and receives email may be well served by hosted mailboxes; see [email hosting](https://dijituldns.co.uk/email-hosting/) and [email hosting vs Microsoft 365](https://dijituldns.co.uk/compare/email-hosting-vs-microsoft-365/). If your team prefers Gmail and Google Docs, [Google Workspace](https://dijituldns.co.uk/google-workspace-setup/) is the equivalent.

## The DNS records Microsoft 365 needs

| Record | Name | Purpose |

| TXT | @ | `MS=ms...` value to verify you own the domain |
| MX | @ | The exact value shown in the admin centre for your domain |
| CNAME | autodiscover | `autodiscover.outlook.com`, so Outlook finds settings itself |
| TXT | @ | SPF including `spf.protection.outlook.com` |
| CNAME | selector1._domainkey | DKIM key, value from Microsoft |
| CNAME | selector2._domainkey | Second DKIM key, used when Microsoft rotates keys |
| TXT | _dmarc | DMARC policy, starting at `p=none` |

We copy values from your tenant rather than typing them from memory, because Microsoft generates them per domain. In Cloudflare, every one of these stays "DNS only".

## How we run the set-up

- You buy the licences from Microsoft or your reseller, so the tenant is in your name.
- We add your domain in the admin centre and publish the verification TXT record.
- We create users, aliases and any shared mailboxes or groups.
- If mail exists elsewhere, we copy it in first. The method is on [moving email provider](https://dijituldns.co.uk/moving-email-provider/).
- We lower the TTL, switch the MX record, add autodiscover and merge Microsoft into your existing SPF record rather than adding a second one.
- We publish the DKIM CNAMEs and switch signing on, then add DMARC at `p=none` and review the reports before tightening.
- We help connect Outlook on desktops and phones.

## Mistakes we often fix

- **DKIM never enabled.** The CNAMEs are published but signing was not switched on, so mail goes out unsigned with your domain.
- **Old MX records left in place**, so some mail still lands at the previous host.
- **A second SPF record** added for Microsoft, which makes SPF fail for everything.
- **Autodiscover missing**, so Outlook keeps asking for server settings.

Help with the records themselves is on [SPF, DKIM and DMARC records](https://dijituldns.co.uk/spf-dkim-dmarc-records/) and [MX records set-up](https://dijituldns.co.uk/mx-records-setup/).

## Everything else that sends as you

Microsoft 365 is rarely the only thing sending mail from your domain. Website contact forms, accounting and invoicing software, booking systems and newsletter tools often send as you too. Each one must either be listed in your SPF record or sign with DKIM on your domain, or DMARC will flag its mail once the policy is tightened.

SPF has a limit of 10 DNS lookups, and every `include` counts, so a long list of tools can break it. We check the total when we merge Microsoft in. Microsoft also applies its own rules: since 5 May 2025, domains sending over 5,000 messages a day to Outlook.com, Hotmail and Live addresses need SPF, DKIM and DMARC in place.

## How dijitul helps

Our Microsoft 365 set-up is £45 an hour + VAT, or a fixed quote when mailboxes are being moved. You pay Microsoft's own per-user price for the licences. We manage the DNS side afterwards in Cloudflare. For day-to-day Microsoft 365 support, user changes and device problems, our sister site [dijitul support](https://dijitulsupport.co.uk/) covers IT support. Call [01623 650333](tel:01623650333) or email [info@dijitul.uk](mailto:info@dijitul.uk).

## FAQs

### How much does Microsoft 365 email cost?

Microsoft sets its own per-user price, which depends on the plan you choose and changes over time, so check Microsoft's current pricing. dijitul does not mark it up. Our set-up is £45 an hour + VAT, or a fixed quote when mailboxes need moving.

### What MX record does Microsoft 365 use?

Microsoft generates the MX value for each domain, and it is shown in the Microsoft 365 admin centre under your domain's DNS records. Copy it exactly rather than guessing a format. dijitul takes the value from your tenant and publishes it in Cloudflare.

### How do I set up DKIM for Microsoft 365?

Publish two CNAME records, selector1._domainkey and selector2._domainkey, with the values Microsoft gives you, then enable DKIM signing for the domain in the Defender or admin portal. Two selectors let Microsoft rotate keys without breaking signing.

### Why does Outlook keep asking for server settings?

Usually the autodiscover CNAME is missing or wrong. For Microsoft 365 it should point autodiscover on your domain to autodiscover.outlook.com. Once it resolves, Outlook finds the mailbox settings itself. dijitul checks this as part of every set-up.

### Do I need Microsoft 365 for shared mailboxes?

Not always. Hosted mailboxes can share an address through forwarders. But Microsoft 365 shared mailboxes give each person their own sign-in with proper permissions, and Microsoft says they need no licence up to 50 GB. dijitul can set either up.

### Will my website be affected?

No. Moving email to Microsoft 365 changes the MX, autodiscover and TXT records only. Your website's A or CNAME records stay as they are. dijitul edits only the records that email needs and checks the site afterwards.

## Prices and contact

Domains are priced live in the client portal. DNS management and 10 mailboxes are included with dijihost Complete Hosting at £1 a day + VAT. On their own, DNS and email set-up is £45 an hour + VAT or a fixed quote. Domain search and registration: https://clients.dijitul.uk. Hosting: https://dijihost.co.uk/ (£1 a day + VAT). Contact: https://dijituldns.co.uk/contact/ · 01623 650333 · info@dijitul.uk