UK domains, DNS and business email · real people · since 200601623 650333 · Client login
Search domains

Microsoft 365 Email Setup on Your Domain

dijitul sets up Microsoft 365 email on your domain: domain verification, the MX record, autodiscover, SPF, DKIM and DMARC. You pay Microsoft's own per-user price; our set-up is £45 an hour + VAT, or a fixed quote when mailboxes need moving. Your website can stay wherever it is hosted.

£45 an hour + VAT

Updated 2026-10-18 · by the dijitul DNS team, Mansfield, UK

Key facts

  • You pay Microsoft's own per-user price; dijitul set-up is £45 an hour + VAT
  • Domain verified with an MS=ms TXT record
  • MX value copied exactly from the Microsoft 365 admin centre
  • Autodiscover CNAME to autodiscover.outlook.com
  • SPF include: spf.protection.outlook.com
  • DKIM via two CNAMEs: selector1._domainkey and selector2._domainkey

When Microsoft 365 makes sense

Microsoft 365 is the natural choice if your business runs on Outlook, Word, Excel and Teams. It adds shared calendars, OneDrive and SharePoint storage, and shared mailboxes with proper permissions, all tied to one sign-in per user.

It is not always needed. A small team that only sends and receives email may be well served by hosted mailboxes; see email hosting and email hosting vs Microsoft 365. If your team prefers Gmail and Google Docs, Google Workspace is the equivalent.

The DNS records Microsoft 365 needs

RecordNamePurpose
TXT@MS=ms... value to verify you own the domain
MX@The exact value shown in the admin centre for your domain
CNAMEautodiscoverautodiscover.outlook.com, so Outlook finds settings itself
TXT@SPF including spf.protection.outlook.com
CNAMEselector1._domainkeyDKIM key, value from Microsoft
CNAMEselector2._domainkeySecond DKIM key, used when Microsoft rotates keys
TXT_dmarcDMARC policy, starting at p=none

We copy values from your tenant rather than typing them from memory, because Microsoft generates them per domain. In Cloudflare, every one of these stays "DNS only".

How we run the set-up

  1. You buy the licences from Microsoft or your reseller, so the tenant is in your name.
  2. We add your domain in the admin centre and publish the verification TXT record.
  3. We create users, aliases and any shared mailboxes or groups.
  4. If mail exists elsewhere, we copy it in first. The method is on moving email provider.
  5. We lower the TTL, switch the MX record, add autodiscover and merge Microsoft into your existing SPF record rather than adding a second one.
  6. We publish the DKIM CNAMEs and switch signing on, then add DMARC at p=none and review the reports before tightening.
  7. We help connect Outlook on desktops and phones.

Mistakes we often fix

  • DKIM never enabled. The CNAMEs are published but signing was not switched on, so mail goes out unsigned with your domain.
  • Old MX records left in place, so some mail still lands at the previous host.
  • A second SPF record added for Microsoft, which makes SPF fail for everything.
  • Autodiscover missing, so Outlook keeps asking for server settings.

Help with the records themselves is on SPF, DKIM and DMARC records and MX records set-up.

Everything else that sends as you

Microsoft 365 is rarely the only thing sending mail from your domain. Website contact forms, accounting and invoicing software, booking systems and newsletter tools often send as you too. Each one must either be listed in your SPF record or sign with DKIM on your domain, or DMARC will flag its mail once the policy is tightened.

SPF has a limit of 10 DNS lookups, and every include counts, so a long list of tools can break it. We check the total when we merge Microsoft in. Microsoft also applies its own rules: since 5 May 2025, domains sending over 5,000 messages a day to Outlook.com, Hotmail and Live addresses need SPF, DKIM and DMARC in place.

How dijitul helps

Our Microsoft 365 set-up is £45 an hour + VAT, or a fixed quote when mailboxes are being moved. You pay Microsoft's own per-user price for the licences. We manage the DNS side afterwards in Cloudflare. For day-to-day Microsoft 365 support, user changes and device problems, our sister site dijitul support covers IT support. Call 01623 650333 or email info@dijitul.uk.

How it works and what it costs

Domains are priced live in the client portal. DNS management and 10 mailboxes are included with dijihost Complete Hosting at £1 a day + VAT. On their own, DNS and email set-up is £45 an hour + VAT or a fixed quote.

  1. Tell us what you have

    Your domains, who they are registered with, where your DNS and email live today, and what you want to change.

  2. Plan the change

    We list every DNS record and mailbox first, so nothing is forgotten, and agree a time to switch.

  3. Make the switch

    Transfers, nameserver changes, DNS records and mailbox moves, done carefully with low TTLs and a rollback plan.

  4. Check it works

    We test the website, email delivery, SPF, DKIM and DMARC from the outside before calling it done.

  5. Look after it

    Renewals, records and email stay looked after, and you can call a person when something changes.

Frequently asked questions

How much does Microsoft 365 email cost?

Microsoft sets its own per-user price, which depends on the plan you choose and changes over time, so check Microsoft's current pricing. dijitul does not mark it up. Our set-up is £45 an hour + VAT, or a fixed quote when mailboxes need moving.

What MX record does Microsoft 365 use?

Microsoft generates the MX value for each domain, and it is shown in the Microsoft 365 admin centre under your domain's DNS records. Copy it exactly rather than guessing a format. dijitul takes the value from your tenant and publishes it in Cloudflare.

How do I set up DKIM for Microsoft 365?

Publish two CNAME records, selector1._domainkey and selector2._domainkey, with the values Microsoft gives you, then enable DKIM signing for the domain in the Defender or admin portal. Two selectors let Microsoft rotate keys without breaking signing.

Why does Outlook keep asking for server settings?

Usually the autodiscover CNAME is missing or wrong. For Microsoft 365 it should point autodiscover on your domain to autodiscover.outlook.com. Once it resolves, Outlook finds the mailbox settings itself. dijitul checks this as part of every set-up.

Do I need Microsoft 365 for shared mailboxes?

Not always. Hosted mailboxes can share an address through forwarders. But Microsoft 365 shared mailboxes give each person their own sign-in with proper permissions, and Microsoft says they need no licence up to 50 GB. dijitul can set either up.

Will my website be affected?

No. Moving email to Microsoft 365 changes the MX, autodiscover and TXT records only. Your website's A or CNAME records stay as they are. dijitul edits only the records that email needs and checks the site afterwards.

Related

Get domains, DNS and email sorted

Set up properly, records checked, and real people to call. DNS and email are included with dijihost hosting.

Call usSearch domains