Skip to main content
How can we help you today?
There was a problem loading the comments.

Microsoft 365 DNS records in My.GARMTECH (domain verification, MX, SPF, Autodiscover)

Support Portal  »  Knowledgebase  »  Viewing Article

If you want to use Microsoft 365 (Exchange Online, Outlook, Teams, etc.) with your domain, Microsoft will ask you to add several DNS records. DNS changes must be made in the place where your domain’s active DNS zone is managed.

Step 1: Confirm where your DNS is hosted

  • If your domain uses GARMTECH nameservers (ns1.garmtech.com, ns2.garmtech.com, ns3.garmtech.com), you can typically manage DNS in My.GARMTECH.
  • If your domain uses external nameservers (for example, Cloudflare), you must add the records there. Records added in My.GARMTECH will not apply while external nameservers are active.

Step 2: Get the required records from Microsoft 365

  1. Sign in to the Microsoft 365 admin center.
  2. Go to Settings → Domains and add/select your domain.
  3. Microsoft will show the exact DNS records required for your tenant (verification + services you enable).

Important: always copy the values from Microsoft. Some records (especially DKIM) are unique per tenant.

Step 3: Add the records in My.GARMTECH

  1. Log in to My.GARMTECH.
  2. Open Domains → select the domain → open DNS Management (name may vary slightly).
  3. Create the records exactly as provided by Microsoft (type, name/host, value, priority, TTL).
  4. Save changes.

Typical Microsoft 365 DNS records (examples)

The exact list depends on which Microsoft services you enable. Below is a typical set so you know what to expect (do not copy blindly; use Microsoft’s values):

Purpose Type Name/Host Value/Target Notes
Domain ownership verification TXT @ MS=msXXXXXXXX Microsoft provides the exact value.
Inbound mail to Microsoft 365 MX @ <your-domain>.mail.protection.outlook.com Priority is provided by Microsoft. Remove old MX records if you are migrating email.
SPF (sending authorization) TXT @ v=spf1 include:spf.protection.outlook.com -all If you already have an SPF record, you must merge it (only one SPF TXT record should exist).
Autodiscover CNAME autodiscover autodiscover.outlook.com Helps mail apps configure accounts automatically.
DKIM (optional but recommended) CNAME selector1._domainkey / selector2._domainkey Provided by Microsoft DKIM values are tenant-specific.

Step 4: Wait for propagation and verify

  • DNS changes are usually visible within minutes, but global propagation can take up to 24 hours.
  • You can verify records with command-line tools (dig/nslookup) or online DNS checkers.

Common mistakes

  • Adding records in My.GARMTECH while the domain actually uses external nameservers.
  • Keeping old MX records after switching to Microsoft 365 (mail may go to the wrong provider).
  • Creating multiple SPF TXT records instead of a single merged one.
Share via
Did you find this article useful?  

Related Articles

Comments

Add Comment

Replying to  

Categories