Configure namespaces, accepted domains, and DNS records, including Exchange Online Protection (EOP)

In the Microsoft 365 Messaging exam, it is important to have a clear understanding of how to configure namespaces, accepted domains, and DNS records for Exchange Online Protection (EOP). This article will provide a step-by-step guide to help you accomplish this task.

Namespaces

In EOP, namespaces are used to define the domains that are protected by EOP. To configure namespaces, follow these steps:

1. Sign in to the Microsoft 365 admin center.
2. Go to the Exchange admin center.
3. Navigate to the Protection section and select “Spam filter” from the menu.
4. Click on the “Edit” button next to “Default” in the Inbound spam filter policy or create a new policy.
5. Under the “IP Allow List” section, configure the namespace by adding the domains you want to protect.
6. Save the changes.

Accepted Domains

Accepted domains are the domains that you configure in Microsoft 365 to receive email messages. To configure accepted domains, follow these steps:

1. Sign in to the Microsoft 365 admin center.
2. Go to the Exchange admin center.
3. Navigate to the Recipients section and select “Mailboxes” from the menu.
4. Under the “Email Address” section, click on the “+” icon to add a new accepted domain.
5. Enter the domain name and choose the appropriate domain type (Authoritative, Internal Relay, or External Relay) based on your requirements.
6. Save the changes.

DNS Records

Configuring DNS records is crucial for proper email flow and security. Here are the DNS records you may need to configure for EOP:

1. MX record: An MX (Mail Exchanger) record is used to route incoming email traffic to EOP. You need to create an MX record in your DNS zone and point it to the EOP endpoint provided by Microsoft. The record should have a low priority (e.g., 0) to ensure proper routing of email.

Record Type: MX
Host: @ (or your domain name)
Points to:
Priority: 0
TTL: Default


2. SPF record: An SPF (Sender Policy Framework) record helps prevent spoofing and phishing by specifying the authorized mail servers for a domain. You need to create a TXT record in your DNS zone with the SPF value provided by Microsoft.

Record Type: TXT
Host: @ (or your domain name)
TXT value: "v=spf1 include:spf.protection.outlook.com -all"
TTL: Default

3. DKIM record: DKIM (DomainKeys Identified Mail) provides an additional layer of email security by adding a digital signature to outgoing email messages. To configure DKIM, you need to generate a DKIM record in the Exchange admin center and add it as a CNAME record in your DNS zone.

Record Type: CNAME
Host: selector1._domainkey
Points to: selector1-yourdomain-com._domainkey.yourdomain.onmicrosoft.com
TTL: Default

4. DMARC record: DMARC (Domain-based Message Authentication, Reporting, and Conformance) allows domain owners to specify the policy for handling mail that fails the SPF or DKIM checks. You can create a TXT record with the DMARC policy value provided by Microsoft.

Record Type: TXT
Host: _dmarc
TXT value: "v=DMARC1; p=none; rua=mailto:[email protected]"
TTL: Default

Note: Replace <EOP-endpoint> with the appropriate EOP endpoint, and update other values according to your domain-specific settings.

Exchange Online Protection (EOP)

EOP provides advanced email filtering capabilities to protect against spam, malware, and other email-based threats. To configure EOP settings, follow these steps:

1. Sign in to the Exchange admin center in Microsoft 365.
2. Go to the Protection section and select “Protection” or “Spam filter” from the menu.
3. Configure the desired settings for spam and malware filtering, transport rules, and connection filtering based on your organization’s requirements.
4. Save the changes.

By following the steps mentioned above, you can successfully configure namespaces, accepted domains, and DNS records for EOP, ensuring proper email delivery and protection against threats.

Remember, it is essential to consult the official Microsoft documentation for the most up-to-date information and detailed guidance in configuring EOP for the Microsoft 365 Messaging exam.