- Go to https://security.microsoft.com/authentication?viewid=DKIM
- Click on Domain name
- Copy CNAME records
If not CNAME is listed, click CREATE DKIM to list the records needed - Go to the Domain’s DNS Server
- Add both CNAMES copied from above
- Add TXT record (if it doesn't already exist): _dmarc Value: v=DMARC1; p=none TTL: Lowest
- Add TXT record (if it doesn't already exist): v=spf1 include:spf.protection.outlook.com -all
- Go to https://security.microsoft.com/authentication?viewid=DKIM
- Click on Domain name
- Sign messages for this domain with DKIM signatures to ENABLED
(This may take 15 minutes before it will let you ENABLE) - Repeat this for all domain names listed
- Once all domains are ENABLED, go to https://security.microsoft.com/antiphishing
- Check settings for rule / rules
- Try to send anything to the JUNK folder
- Go to https://security.microsoft.com/presetSecurityPolicies
- Turn on Standard Protection
- Select ALL RECIPIENTS
- Go to https://security.microsoft.com/spoofintelligence
- Block anything that has the email address of the domain working on
