custom domain txt

ares 206

Hi

ihave a txt record on my dns with the ms=xxxxxxx syntax, is it possible to see if it's used by an azure tanant for domain verification?

the domain should not be in use, and i would like to verifiy it for a new tenant, can i add just another txt ms=xxxxx record and leave also the old one? does Azure check all the txtx records in the dns?

another question is, after the verification can i delete the record or does azure periodically some check?

thanks

2 answers

Marcin Policht 24,630 Reputation points MVP

2024-09-03T18:14:19.7833333+00:00

In short, there isn't - and even if it was, it would be highly unlikely to have a match...

This record is used only once - for the initial verification. You can delete it afterwards.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Please sign in to rate this answer.
ares 206 Reputation points

2024-09-03T21:16:20.1533333+00:00

if i would like to verifiy my domain with a new tenant (suppose it’s not already associated) can i add another txt record ms=xxxx, and leave also the old one? does azure check for the right record?

Is this documented in some official document? that i can remove the txt record?

Marcin Policht 24,630 Reputation points MVP

2024-09-04T14:04:20.2433333+00:00

Yes - you can add as many records as you want

As far as documenation goes, refer to:

https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/information-for-dns-records?view=o365-worldwide

which states

Remove the TXT record (or MX record) from your DNS host once the domain is verified in Microsoft 365.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Navya 11,225 Reputation points Microsoft Vendor

2024-09-05T12:08:52.55+00:00

Hi @ares

Thank you for posting this in Microsoft Q&A.

ihave a txt record on my dns with the ms=xxxxxxx syntax, is it possible to see if it's used by an azure tanant for domain verification?

Yes, by using this link, you can discover where your domain is associated with an Azure tenant.

the domain should not be in use, and i would like to verifiy it for a new tenant, can i add just another txt ms=xxxxx record and leave also the old one? does Azure check all the txtx records in the dns?

Yes, you can add another TXT record, but domain name can only be verified in one directory. If your domain name is currently verified in another directory, it can't also be verified in the new directory so you must delete the domain name from the old directory.

can i delete the record or does azure periodically some check

Yes, you can delete the TXT or MX record from your DNS host once the domain is verified.

For your reference: https://learn.microsoft.com/en-us/entra/fundamentals/add-custom-domain

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Please sign in to rate this answer.
Navya 11,225 Reputation points Microsoft Vendor

2024-09-09T04:28:50.17+00:00

Hi @ares

Just checking in to see if the above answer helped. If this answers your query, please don’t forget to click "Accept Answer" and "Up-Vote" for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Navya 11,225 Reputation points Microsoft Vendor

2024-09-13T11:30:22.6266667+00:00

Hi @ares

I am checking the status of this case. Please let us know if you would like further assistance. Meanwhile, if the reply is helpful to you, please try to mark it as an answer to help others who encounter the same issue and read this thread. Thank you for your understanding and patience!

ares 206 Reputation points

2024-09-25T07:54:20.0233333+00:00

Yes I'm in this situation.

i have a first record MS=msXXXXXXXX for a domain i don't know

i need to verify a second domain and added

MS=msYYYYYYYYY

if i query dns for tx the record MS=msXXXXXXXX show up first in the list

the record MS=msYYYYYYYYY show last

when i try to verify i doesn't work

is it becasue it finds the first WRONG record?

thanks

Navya 11,225 Reputation points Microsoft Vendor

2024-09-26T05:14:07.2466667+00:00

Hi @ares

When you add a new TXT record to your domain, it is important to make sure that the record name is unique and does not conflict with any existing records. When you query the DNS for the TXT record, the order of the records returned is not guaranteed. It's possible that the first record MS=msXXXXXXXX is returned first, and the verification process stops there, without checking the subsequent records.

This is because the verification process typically checks the first matching record it finds, and if it doesn't match the expected value, it fails. In your case, the first record MS=msXXXXXXXX doesn't match the expected value MS=msYYYYYYYYY, so the verification fails.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer