Custom Domain Configuration Issue - Email Communication Service

Question

Hi Team:

Despite trying several times adding verification TXT record to my Domain Provider unable to successfully configure. Tried below

a) In normal and incognito browser windows

b) Waited for more than 24 hours

c) Also included my spf value as below

v=spf1 include:_spf.google.com include:spf.protection.outlook.com -all

d) Tried including TXT with both ms=<Verification code> and ms-domain-verification=<Verification code>

Also need around 500 emails quota per hour.

Thanks

Vivek

Answer 1

Hi Vivek,

Please follow instructions below and reply back with your results and/or any questions you may have.

1. On your domain registrar's DNS portal, please edit your existing TXT record (spf) and reduce TTL to low value. For example, set it to 60 (1 minute), or if your provider won't let you reduce it that low try 300 (5 minutes), or whatever the lowest value they allow.

NOTE: The low TTL is just for troubleshooting. After things are working properly you can increase it to 3600 (1 hour) or back to what you have it now, which is 14400 (4 hours).

2. Please add two new DNS records, as below:

Record type	Host	Value	TTL
CNAME	selector1-azurecomm-prod-net._domainkey	selector1-azurecomm-prod-net._domainkey.azurecomm.net	3600
CNAME	selector2-azurecomm-prod-net._domainkey	selector2-azurecomm-prod-net._domainkey.azurecomm.net	3600

3. In Azure portal, when you start verification process (click Configure link) for your ECS domain it will give you a verification value to use. Copy/paste this value and create DNS record similar to below:

Record type	Host	Value	TTL
TXT	@	ms-domain-verification=xxxxxxxx-xxxx-4xxx-xxxx-xxxxxxxxxxxx	60

After creating the TXT record in your provider's DNS portal, wait a minute for it to be created and then continue with the verification wizard in Azure portal. When you see "verification in progress" in Azure portal, click the Refresh button every 30 seconds or so.

If it doesn't say Verified within 10 minutes, click Cancel, again click Refresh periodically until it is finished cancelling, then click the link again to start verification, click Next, Done, Close, etc., and it should say Verified very quickly. This is a subtle bug that happens sometimes in the portal.

At this point, since you created the other two records earlier (including already having spf), all four columns (Domain/SPF/DKIM/DKIM2) should show Verified.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP

Answer 2

Hello @Vivek Ramanavar

Thank you for reaching out Microsoft Q&A. Yes, the merged SPF record display when using nslookup command confirms DNS propagation.

Thank you @TP for detailed response and guiding the user with the detailed steps and resolving the query.