Want to see a customized list of DNS records for your Office 365 organization? You can find the info you need to create Office 365 DNS records for your domain in Office 365. Need step-by-step help to add these records at your domain's DNS host, such as GoDaddy or eNom?Find links to step-by-step instructions for many popular DNS hosts. Sticking around to use the reference list for your own custom deployment? The below list should be used as a reference for your custom Office 365 deployment. You will need to select which records apply to your organization and fill in the appropriate values. Go back toNetwork planning and performance tuning for Office 365. |
DNS record | Purpose | Value to use |
CNAME (Suite) | Used by Office 365 to direct authentication to the correct identity platform. More information Note: This CNAME only applies to Office 365 operated by 21Vianet. More information | Alias: msoid Target: clientconfig.partner.microsoftonline-p.net.cn |
TXT (Domain verification) | Used by Office 365 to verify only that you own your domain. It doesn't affect anything else. | Host: @ (or, for some DNS hosting providers, your domain name) TXT Value:A text string provided by Office 365 The Office 365 domain setup wizard provides the values that you use to create this record. |
DNS record | Purpose | Value to use |
CNAME (Exchange Online) | Helps Outlook clients to easily connect to the Exchange Online service by using the Autodiscover service. Autodiscover automatically finds the correct Exchange Server host and configures Outlook for users. | Alias: Autodiscover Target: autodiscover.outlook.com |
MX (Exchange Online) | Sends incoming mail for your domain to the Exchange Online service in Office 365. [!NOTE] Once email is flowing to Exchange Online, you should remove the MX records that are pointing to your old system. | Domain: For example, contoso.com Target email server:<MX token>.mail.protection.outlook.com Preference/Priority: Lower than any other MX records (this ensures mail is delivered to Exchange Online) - for example 1 or 'low' Find your <MX token> by following these steps: Sign in to Office 365, go to Office 365 admin > Domains. In the Action column for your domain, choose Fix issues. In the MX records section, choose What do I fix? Follow the directions on this page to update your MX record. What is MX priority? |
SPF (TXT) (Exchange Online) | Helps to prevent other people from using your domain to send spam or other malicious email. Sender policy framework (SPF) records work by identifying the servers that are authorized to send email from your domain. | External DNS records required for SPF |
TXT (Exchange federation) | Used for Exchange federation for hybrid deployment. | TXT record 1: For example, contoso.com and associated custom-generated, domain-proof hash text (for example, Y96nu89138789315669824) TXT record 2: For example, exchangedelegation.contoso.com and associated custom-generated, domain-proof hash text (for example, Y3259071352452626169) |
CNAME (Exchange federation) | Helps Outlook clients to easily connect to the Exchange Online service by using the Autodiscover service when your company is using Exchange federation. Autodiscover automatically finds the correct Exchange Server host and configures Outlook for your users. | Alias: For example, Autodiscover.service.contoso.com Target: autodiscover.outlook.com |
DNS record | Purpose | Value to use |
SRV (Skype for Business Online) | Allows your Office 365 domain to share instant messaging (IM) features with external clients by enabling SIP federation. Read more about Office 365 URLs and IP address ranges. | Service: sipfederationtls Protocol: TCP Priority: 100 Weight: 1 Port: 5061 Target: sipfed.online.lync.com Note: If the firewall or proxy server blocks SRV lookups on an external DNS, you should add this record to the internal DNS record. |
SRV (Skype for Business Online) | Used by Skype for Business to coordinate the flow of information between Lync clients. | Service: sip Protocol: TLS Priority: 100 Weight: 1 Port: 443 Target: sipdir.online.lync.com |
CNAME (Skype for Business Online) | Used by the Lync client to help find the Skype for Business Online service and sign in. | Alias: sip Target: sipdir.online.lync.com For more information, see Office 365 URLs and IP address ranges. |
CNAME (Skype for Business Online) | Used by the Lync mobile client to help find the Skype for Business Online service and sign in. | Alias: lyncdiscover Target: webdir.online.lync.com |
DNS record | Purpose | Value to use |
Host (A) | Used for single sign-on (SSO). It provides the endpoint for your off-premises users (and on-premises users, if you like) to connect to your Active Directory Federation Services (AD FS) federation server proxies or load-balanced virtual IP (VIP). | Target: For example, sts.contoso.com |
Number | If you're using… | Purpose | Add these includes |
---|---|---|---|
1 | All email systems (required) | All SPF records start with this value | v=spf1 |
2 | Exchange Online (common) | Use with just Exchange Online | include:spf.protection.outlook.com |
3 | Third-party email system (less common) | include:<email system like mail.contoso.com> | |
4 | On-premises mail system (less common) | Use if you're using Exchange Online Protection or Exchange Online plus another mail system | ip4:<0.0.0.0> ip6:< : : > include:<mail.contoso.com> The value in brackets (<>) should be other mail systems that will send email for your domain. |
5 | All email systems (required) | -all |