Do I Need Microsoft Office

1. Why Do I Need Microsoft
2. Do I Need Microsoft Office To Use Teams
3. Do I Need Microsoft Office 365 Personal
4. Do I Need Microsoft Office If I Have Windows 10

We'll get you the help you need. Get started More support options. Small & Medium Business: Microsoft 365/Office 365 Admins. Open a service request in the Microsoft 365/Office 365 Admin Center. Premium, Unified and Paid Technical Support. Get technical support for on-premise Microsoft. You don't have your own email servers, but you need to send email from non-mailboxes: printers, fax machines, apps, or other devices. For details, see Option 3: Configure a connector to send mail using Microsoft 365 or Office 365 SMTP relay: Optional: Only one connector for incoming email:. From: Your organization's email server. To. Your computer name identifies it on a network. Find your computer name in Windows 7. Click Start, right-click Computer, and then click Properties. The computer name appears under Computer name, domain, and workgroup settings.

Why Do I Need Microsoft

Find your mail flow scenario to see if you need to create a connector for your Exchange Online organization.

1. Microsoft accounts. A Microsoft account is a free account you use to access many Microsoft devices and services, such as the web-based email service Outlook.com (also known as hotmail.com, msn.com, live.com), Office Online apps, Skype, OneDrive, Xbox Live, Bing, Windows, or the Microsoft Store.
2. Go to the meeting invite and select Join Microsoft Teams Meeting. That'll open a web page, where you'll see two choices: Download the Windows app and Join on the web instead. If you join on the web, you can use either Microsoft Edge or Google Chrome.

Note

For more information about these scenarios, see Configure mail flow using connectors in Office 365.

Important

The improved Microsoft 365 security center is now available. This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 security center. Learn what's new.

Applies to

Summary: This article describes how you use DomainKeys Identified Mail (DKIM) with Microsoft 365 to ensure that destination email systems trust messages sent outbound from your custom domain.

You should use DKIM in addition to SPF and DMARC to help prevent spoofers from sending messages that look like they are coming from your domain. DKIM lets you add a digital signature to outbound email messages in the message header. It may sound complicated, but it's really not. When you configure DKIM, you authorize your domain to associate, or sign, its name to an email message by using cryptographic authentication. Email systems that receive email from your domain can use this digital signature to help determine if incoming email that they receive is legitimate.

Basically, you use a private key to encrypt the header in your domain's outgoing email. You publish a public key to your domain's DNS records that receiving servers can then use to decode the signature. They use the public key to verify that the messages are really coming from you and not coming from someone spoofing your domain.

Microsoft 365 automatically sets up DKIM for its initial 'onmicrosoft.com' domains. That means you don't need to do anything to set up DKIM for any initial domain names (for example, litware.onmicrosoft.com). For more information about domains, see Domains FAQ.

You can choose to do nothing about DKIM for your custom domain too. If you don't set up DKIM for your custom domain, Microsoft 365 creates a private and public key pair, enables DKIM signing, and then configures the Microsoft 365 default policy for your custom domain. While this is sufficient coverage for most customers, you should manually configure DKIM for your custom domain in the following circumstances:

• You have more than one custom domain in Microsoft 365

• You're going to set up DMARC too (recommended)

• You want control over your private key

• You want to customize your CNAME records

• You want to set up DKIM keys for email originating out of a third-party domain, for example, if you use a third-party bulk mailer.

In this article:

How DKIM works better than SPF alone to prevent malicious spoofing

SPF adds information to a message envelope but DKIM actually encrypts a signature within the message header. When you forward a message, portions of that message's envelope can be stripped away by the forwarding server. Since the digital signature stays with the email message because it's part of the email header, DKIM works even when a message has been forwarded as shown in the following example.

In this example, if you had only published an SPF TXT record for your domain, the recipient's mail server could have marked your email as spam and generated a false positive result. The addition of DKIM in this scenario reduces false positive spam reporting. Because DKIM relies on public key cryptography to authenticate and not just IP addresses, DKIM is considered a much stronger form of authentication than SPF. We recommend using both SPF and DKIM, as well as DMARC in your deployment.

The nitty gritty: DKIM uses a private key to insert an encrypted signature into the message headers. The signing domain, or outbound domain, is inserted as the value of the d= field in the header. The verifying domain, or recipient's domain, then use the d= field to look up the public key from DNS and authenticate the message. If the message is verified, the DKIM check passes.

Steps to manually upgrade your 1024-bit keys to 2048-bit DKIM encryption keys

Since both 1024 and 2048 bitness are supported for DKIM keys, these directions will tell you how to upgrade your 1024-bit key to 2048 in Exchange Online PowerShell. The steps below are for two use-cases, please choose the one that best fits your configuration.

• When you already have DKIM configured, you rotate bitness by running the following command:

  or

• For a new implementation of DKIM, run the following command:

Stay connected to Exchange Online PowerShell to verify the configuration by running the following command:

Tip

This new 2048-bit key takes effect on the RotateOnDate, and will send emails with the 1024-bit key in the interim. After four days, you can test again with the 2048-bit key (that is, once the rotation takes effect to the second selector).

If you want to rotate to the second selector, your options are a) let the Microsoft 365 service rotate the selector and upgrade to 2048-bitness within the next 6 months, or b) after 4 days and confirming that 2048-bitness is in use, manually rotate the second selector key by using the appropriate cmdlet listed above.

For detailed syntax and parameter information, see the following articles: Rotate-DkimSigningConfig, New-DkimSigningConfig, and Get-DkimSigningConfig.

Steps you need to do to manually set up DKIM

To configure DKIM, you will complete these steps:

Publish two CNAME records for your custom domain in DNS

For each domain for which you want to add a DKIM signature in DNS, you need to publish two CNAME records.

Adobe free macbook. Note

If you haven't read the full article, you may have missed this time-saving PowerShell connection information: Connect to Exchange Online PowerShell.

Run the following commands in Exchange Online PowerShell to create the selector records:

If you have provisioned custom domains in addition to the initial domain in Microsoft 365, you must publish two CNAME records for each additional domain. So, if you have two domains, you must publish two additional CNAME records, and so on.

Use the following format for the CNAME records.

Important

If you are one of our GCC High customers, we calculate domainGuid differently! Instead of looking up the MX record for your initialDomain to calculate domainGuid, instead we calculate it directly from the customized domain. For example, if your customized domain is 'contoso.com' your domainGuid becomes 'contoso-com', any periods are replaced with a dash. So, regardless of what MX record your initialDomain points to, you'll always use the above method to calculate the domainGuid to use in your CNAME records.

Do I Need Microsoft Office To Use Teams

Where:

• For Microsoft 365, the selectors will always be 'selector1' or 'selector2'.

• domainGUID is the same as the domainGUID in the customized MX record for your custom domain that appears before mail.protection.outlook.com. For example, in the following MX record for the domain contoso.com, the domainGUID is contoso-com:

  contoso.com. 3600 IN MX 5 contoso-com.mail.protection.outlook.com

• initialDomain is the domain that you used when you signed up for Microsoft 365. Initial domains always end in onmicrosoft.com. For information about determining your initial domain, see Domains FAQ.

For example, if you have an initial domain of cohovineyardandwinery.onmicrosoft.com, and two custom domains cohovineyard.com and cohowinery.com, you would need to set up two CNAME records for each additional domain, for a total of four CNAME records.

Mac os mountain lion download free. Note

It's important to create the second record, but only one of the selectors may be available at the time of creation. In essence, the second selector might point to an address that hasn't been created yet. We still recommended that you create the second CNAME record, because your key rotation will be seamless.

Steps to enable DKIM signing for your custom domain

Once you have published the CNAME records in DNS, you are ready to enable DKIM signing through Microsoft 365. You can do this either through the Microsoft 365 admin center or by using PowerShell.

To enable DKIM signing for your custom domain through the admin center

1. Sign in to Microsoft 365 with your work or school account.

2. Go to protection.office.com or security.microsoft.com depending on which portal you use, and follow the path below.

3. Select the domain for which you want to enable DKIM and then, for Sign messages for this domain with DKIM signatures, choose Enable. Repeat this step for each custom domain.

To enable DKIM signing for your custom domain by using PowerShell

Important

If you are configuring DKIM for the first time and see the error 'No DKIM keys saved for this domain.' complete the command in step 2, below (for example, Set-DkimSigningConfig -Identity contoso.com -Enabled $true) to see the key.

1. Connect to Exchange Online PowerShell.

2. Run the following command:

   Where domain is the name of the custom domain that you want to enable DKIM signing for.

   For example, for the domain contoso.com:

To Confirm DKIM signing is configured properly for Microsoft 365

Wait a few minutes before you follow these steps to confirm that you have properly configured DKIM. This allows time for the DKIM information about the domain to be spread throughout the network.

• Send a message from an account within your Microsoft 365 DKIM-enabled domain to another email account such as outlook.com or Hotmail.com.

• Do not use an aol.com account for testing purposes. AOL may skip the DKIM check if the SPF check passes. This will nullify your test.

• Open the message and look at the header. Instructions for viewing the header for the message will vary depending on your messaging client. For instructions on viewing message headers in Outlook, see View internet message headers in Outlook.

  The DKIM-signed message will contain the host name and domain you defined when you published the CNAME entries. The message will look something like this example:

• Look for the Authentication-Results header. While each receiving service uses a slightly different format to stamp the incoming mail, the result should include something like DKIM=pass or DKIM=OK.

To configure DKIM for more than one custom domain

If at some point in the future you decide to add another custom domain and you want to enable DKIM for the new domain, you must complete the steps in this article for each domain. Specifically, complete all steps in What you need to do to manually set up DKIM.

Disabling the DKIM signing policy for a custom domain

Disabling the signing policy does not completely disable DKIM. After a period of time, Microsoft 365 will automatically apply the default policy for your domain. For more information, see Default behavior for DKIM and Microsoft 365.

To disable the DKIM signing policy by using Windows PowerShell

1. Connect to Exchange Online PowerShell.

2. Run one of the following commands for each domain for which you want to disable DKIM signing.

   For example:

   Or

   Where number is the index of the policy. For example:

Default behavior for DKIM and Microsoft 365

If you do not enable DKIM, Microsoft 365 automatically creates a 1024-bit DKIM public key for your default domain and the associated private key which we store internally in our datacenter. By default, Microsoft 365 uses a default signing configuration for domains that do not have a policy in place. This means that if you do not set up DKIM yourself, Microsoft 365 will use its default policy and keys it creates to enable DKIM for your domain.

Also, if you disable DKIM signing after enabling it, after a period of time, Microsoft 365 will automatically apply the default policy for your domain.

In the following example, suppose that DKIM for fabrikam.com was enabled by Microsoft 365, not by the administrator of the domain. This means that the required CNAMEs do not exist in DNS. DKIM signatures for email from this domain will look something like this:

In this example, the host name and domain contain the values to which the CNAME would point if DKIM-signing for fabrikam.com had been enabled by the domain administrator. Eventually, every single message sent from Microsoft 365 will be DKIM-signed. If you enable DKIM yourself, the domain will be the same as the domain in the From: address, in this case fabrikam.com. If you don't, it will not align and instead will use your organization's initial domain. For information about determining your initial domain, see Domains FAQ.

Do I Need Microsoft Office 365 Personal

Set up DKIM so that a third-party service can send, or spoof, email on behalf of your custom domain

Some bulk email service providers, or software-as-a-service providers, let you set up DKIM keys for email that originates from their service. This requires coordination between yourself and the third-party in order to set up the necessary DNS records. Some third-party servers can have their own CNAME records with different selectors. No two organizations do it exactly the same way. Instead, the process depends entirely on the organization.

An example message showing a properly configured DKIM for contoso.com and bulkemailprovider.com might look like this:

In this example, in order to achieve this result:

1. Bulk Email Provider gave Contoso a public DKIM key.

2. Contoso published the DKIM key to its DNS record.

3. When sending email, Bulk Email Provider signs the key with the corresponding private key. By doing so, Bulk Email Provider attached the DKIM signature to the message header.

4. Receiving email systems perform a DKIM check by authenticating the DKIM-Signature d=<domain> value against the domain in the From: (5322.From) address of the message. In this example, the values match:

   sender@contoso.com

   d=contoso.com

Do I Need Microsoft Office If I Have Windows 10

Identify domains that do not send email

Organizations should explicitly state if a domain does not send email by specifying v=DKIM1; p= in the DKIM record for those domains. This advises receiving email servers that there are no valid public keys for the domain, and any email claiming to be from that domain should be rejected. You should do this for each domain and subdomain using a wildcard DKIM.

For example, the DKIM record would look like this:

Next steps: After you set up DKIM for Microsoft 365

Although DKIM is designed to help prevent spoofing, DKIM works better with SPF and DMARC. Once you have set up DKIM, if you have not already set up SPF you should do so. For a quick introduction to SPF and to get it configured quickly, see Set up SPF in Microsoft 365 to help prevent spoofing. For a more in-depth understanding of how Microsoft 365 uses SPF, or for troubleshooting or non-standard deployments such as hybrid deployments, start with How Microsoft 365 uses Sender Policy Framework (SPF) to prevent spoofing. Next, see Use DMARC to validate email. Anti-spam message headers includes the syntax and header fields used by Microsoft 365 for DKIM checks.

More information

Key rotation via PowerShellRotate-DkimSigningConfig