Create DNS records at Dyn.com for Office 365

Contributors:

Check the Domains FAQ if you don't find what you're looking for.

If Dyn.com is your DNS hosting provider, follow the steps in this article to verify your domain and set up DNS records for email, Skype for Business Online, and so on.

These are the main records to add. (Need more help? Get support.)

Add a TXT record for verification
Add an MX record to route email
Add six CNAME records
Add a TXT record for SPF to help prevent email spam
Add two SRV records

After you add these records at Dyn.com, your domain will be set up to work with Office 365 services.

To learn about webhosting and DNS for websites with Office 365, see Use a public website with Office 365.

Note: Typically it takes about 15 minutes for DNS changes to take effect. However, it can occasionally take longer for a change you've made to update across the Internet's DNS system. If you're having trouble with mail flow or other issues after adding DNS records, see Troubleshoot issues after changing your domain name or DNS records.

Add a TXT record for verification

Before you use your domain with Office 365, we have to make sure that you own it. Your ability to log in to your account at your domain registrar and create the DNS record proves to Office 365 that you own the domain.

Note: This record is used only to verify that you own your domain; it doesn't affect anything else. You can delete it later, if you like.

To get started, go to your domains page at Dyn.com by using this link. You'll be prompted to login first.
O365_DOM_DynCom_Login2_Login
O365_DOM_DynCom_Login3_DomainName
O365_DOM_DynCom_Login4_Preferences

In the Add DNS Record section, in the boxes for the new record, type or copy and paste the values from the following table.

(Choose the Type value from the drop-down list.)

Host	TTL	Type	Data
(Leave this field empty.)	600	TXT	MS=msXXXXXXXX O365_DOM_UseDestinationPointsToAddressFromTable

Dyn-BP-Verify-1-1

Choose Create Record.
O365_DOM_WaitForUpdateAcrossInternet

Now that you've added the record at your domain registrar's site, you'll go back to Office 365 and request Office 365 to look for the record.

When Office 365 finds the correct TXT record, your domain is verified.

Go to the Domains page.
On the Domains page, choose the domain that you are verifying.
On the Setup page, choose Start setup.
On the Verify domain page, choose Verify.

Add an MX record so email for your domain will come to Office 365

To get started, go to your domains page at Dyn.com by using this link. You'll be prompted to login first.
O365_DOM_DynCom_Login2_Login
On the DNS page for your domain, choose Preferences.
Choose Enable Expert Interface.

In the Add DNS Record section, in the boxes for the new record, type or copy and paste the values from the following table.

(Choose the Type value from the drop-down list.)

Host	TTL	Type	Data
(Leave this field empty.)	600	MX	10 <domain-key>.mail.protection.outlook.com. This value MUST end with a period (.) The 10 is the MX priority value. Add it to the beginning of the MX value, separated from the remainder of the value by a space. Note: Get your <domain-key> from your Office 365 portal account. How do I find this? For more information about priority, see What is MX priority?

Host

TTL

Type

Data

(Leave this field empty.)

600

10 <domain-key>.mail.protection.outlook.com.

This value MUST end with a period (.)

The 10 is the MX priority value. Add it to the beginning of the MX value, separated from the remainder of the value by a space.

Note: Get your <domain-key> from your Office 365 portal account.
How do I find this?

For more information about priority, see What is MX priority?

Dyn-BP-Configure-2-1

Choose Create Record.
If there are any other MX records, remove them by selecting the check box for each one in the Delete column.
Choose Apply Changes.

Add the six CNAME records that are required for Office 365

To get started, go to your domains page at Dyn.com by using this link. You'll be prompted to login first.
O365_DOM_DynCom_Login2_Login
On the DNS page for your domain, choose Preferences.
Choose Enable Expert Interface.

Add the first of the six CNAME records.

In the Add DNS Record section, in the boxes for the new record, type or copy and paste the values from the first row of the following table.

(Choose the Type value from the drop-down list.)

Host	TTL	Type	Data
autodiscover	600	CNAME	autodiscover.outlook.com. This value MUST end with a period (.)
sip	600	CNAME	sipdir.online.lync.com. This value MUST end with a period (.)
lyncdiscover	600	CNAME	webdir.online.lync.com. This value MUST end with a period (.)
msoid	600	CNAME	clientconfig.microsoftonline-p.net. This value MUST end with a period (.)
enterpriseregistration	600	CNAME	enterpriseregistration.windows.net. This value MUST end with a period (.)
enterpriseenrollment	600	CNAME	enterpriseenrollment-s.manage.microsoft.com. This value MUST end with a period (.)

Dyn-BP-Configure-3-1

Choose Create Record.
Add the remaining five CNAME records.

In the Add DNS Record section, create a record by using the values from the next row in the table, and then again choose Create Record to complete that record.

Repeat this process until you have created all six CNAME records.

Add a TXT record for SPF to help prevent email spam

Important: You cannot have more than one TXT record for SPF for a domain. If your domain has more than one SPF record, you'll get email errors, as well as delivery and spam classification issues. If you already have an SPF record for your domain, don't create a new one for Office 365. Instead, add the required Office 365 values to the current record so that you have a single SPF record that includes both sets of values. Need examples? Check out these details and sample SPF records. To validate your SPF record, you can use one of these SPF validation tools.

To get started, go to your domains page at Dyn.com by using this link. You'll be prompted to login first.
O365_DOM_DynCom_Login2_Login
On the DNS page for your domain, choose Preferences.
Choose Enable Expert Interface.

In the Add DNS Record section, in the boxes for the new record, type or copy and paste the values from the following table.

(Choose the Type value from the drop-down list.)

Host	TTL	Type	Data
(Leave this field empty.)	600	TXT	v=spf1 include:spf.protection.outlook.com -all Note: We recommend copying and pasting this entry, so that all of the spacing stays correct.

Dyn-BP-Configure-4-1

Choose Create Record.

Add the two SRV records that are required for Office 365

To get started, go to your domains page at Dyn.com by using this link. You'll be prompted to login first.
O365_DOM_DynCom_Login2_Login
On the DNS page for your domain, choose Preferences.
Choose Enable Expert Interface.

Add the first of the two SRV records.

In the Add DNS Record section, in the boxes for the new record, type or copy and paste the values from the first row of the following table.

(Choose the Type value from the drop-down list.)

Host	TTL	Type	Data
_sip._tls	600	SRV	100 1 443 sipdir.online.lync.com. This value MUST end with a period (.) Note: We recommend copying and pasting this entry, so that all of the spacing stays correct.
_sipfederationtls._tcp	600	SRV	100 1 5061 sipfed.online.lync.com. This value MUST end with a period (.) Note: We recommend copying and pasting this entry, so that all of the spacing stays correct.

Host

TTL

Type

Data

_sip._tls

600

SRV

100 1 443 sipdir.online.lync.com.

This value MUST end with a period (.)

Note: We recommend copying and pasting this entry, so that all of the spacing stays correct.

_sipfederationtls._tcp

600

SRV

100 1 5061 sipfed.online.lync.com.

This value MUST end with a period (.)

Note: We recommend copying and pasting this entry, so that all of the spacing stays correct.

Dyn-BP-Configure-5-1

Choose Create Record.
Add the other SRV record.

In the Add DNS Record section, create a record by using the values from the second row in the table, and then again choose Create Record to complete that record.