Forum Discussion
Sending to Yahoo e mail accounts from my Outlook e mail
For everyone reading this post here is the simplest way to add DKIM records, which I have found fixes the issue of sending to yahoo and aol accounts.
You will need access to whoever host your domain's DNS (for example godaddy.com)
Sign into your Office 365 tenant with an admin account https://admin.microsoft.com
Go to the Security Admin center https://security.microsoft.com
from here go to Policies & rules -> Threat Policies -> Email authentication settings
click on DKIM
Select your main domain which should bring up a new box. ENABLE "sign messages for this domain with DKIM signatures" Most likely you won't have DKIM records setup, so it will fail but it should give you the records you need. They will look like this (but with your own domain):
HOST: selector1._domainkey
TARGET: selector1-domain-com._domainkey.domain.onmicrosoft.com
HOST: selector2._domainkey
TARGET: selector2-domain-com._domainkey.domain.onmicrosoft.com
where domain-com is your own domain (with a dash not a dot) and the end part is your "onmicrosoft.com" domain setup when you first created your 365 account.
Add these records to your DNS and then go back to Office 365 tenant and enable again. (you may have to wait 5 - 10 minutes first) Once enabled you are all set!
Mike
Thanks for the above on the Sector 1 and 2, I have entered those as well, but possibly not correct. I'm going to go out and double check that they are correct. Part of the problem in checking is that I'm logged into work via 365 and the account I have to check is not associated with work but still runs on 365, and as we all know 365 gets confused even if you log out and log in as a new "person" on the same machine. I'll try this, log in as Admin into 365 and see if I've entered the correct Sector 1&2 info. Thanks for the help. Cheers, MJ
mjmcufTry logging into the Office 365 (with admin credentials) in an incognito window. That way it won't conflict with your own account. If you have created the CNAME records correctly then you will be able to enable DKIM. If they aren't correct, then it should tell you what it expects.
- mjtnyc
OHHH you're a genius! I always forget about incognito!! I'll try that and see if it works. Silly work is getting in the way of me getting to this... I'll let you know how this turns out. Thank you again for the help! Cheers, MJ- mjtnyc
Ok, so get this... I went in via incognito and that worked perfectly. Things have shifted a bit I think due to this new Defender thing, but I finally found where you were pointing me to, I opened it and the DKIM for my domain was there, and the name which I guess I already had from my TXT record. But I ran and got the fail report to make sure I had the correct string for Sector 1 and Sector 2. I entered those into the DNS and now I'll see if I have any issues with that entry.
My issue was that I was using 'my actual domain' in the second part (right before the .onmicrosoft.com), that was never going to work!
Thanks again for all the help!
Cheers,
MJ