How do I check DMARC configuration?

Question

How do I check DMARC configuration?

Anonymous

Emails are being flagged as harmful. How do I check DMARC configuration?

Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

Ryan-N 15,910 Reputation points Microsoft External Staff Moderator

2026-01-10T20:41:39.3133333+00:00

Hi @MApeard,

I hope everything is going well on your end.

I’m following up on the support thread we've been working through together. I wanted to check in and see if the information I shared in my previous answer helped resolve the issue you were experiencing.

If you're still experiencing any issues or have further questions, please feel free to reach out at any time. I’m always happy to help if you need anything else.

We want to ensure everything is functioning smoothly and that your experience remains seamless.

Thank you again for your collaboration throughout the troubleshooting process. I look forward to hearing from you soon.

Warm regards,
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

2 answers

Ryan-N 15,910 Reputation points Microsoft External Staff Moderator

2026-01-10T20:41:39.3133333+00:00

Hi @MApeard,

I hope everything is going well on your end.

I’m following up on the support thread we've been working through together. I wanted to check in and see if the information I shared in my previous answer helped resolve the issue you were experiencing.

If you're still experiencing any issues or have further questions, please feel free to reach out at any time. I’m always happy to help if you need anything else.

We want to ensure everything is functioning smoothly and that your experience remains seamless.

Thank you again for your collaboration throughout the troubleshooting process. I look forward to hearing from you soon.

Warm regards,
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

Hi @MApeard,

Welcome to the Microsoft Q&A forum.

Thank you for contacting us. Please allow me to provide you with the following information:

You can access the following website:

Step 1: Go to https://dnschecker.org

Step 2: Click on DNS Lookup > select TXT You do not need to change the DNS server setting.

User's image

Step 3: Enter the following: _dmarc.yourdomain.com

After completing these steps, the DMARC configuration details for your domain will be displayed below. User's image

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

I hope this information is helpful. Please follow these steps and let me know if it works for you. If not, we can work together to resolve this.

Thank you for your patience and your understanding. If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.

I look forward to continuing the conversation.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

To check your DMARC configuration, you can follow these steps:

Verify the DMARC Record: Use a DNS lookup tool to check the DMARC record for your domain. The DMARC record should be located at _dmarc.yourdomain.com. The record should follow the syntax:
- v=DMARC1; p=<policy>; pct=<percentage>; rua=mailto:<aggregate_report>; ruf=mailto:<forensic_report>
- Ensure that the policy (p) is set to either reject, quarantine, or none as per your requirements.
Check for SPF and DKIM Alignment: Ensure that your SPF and DKIM records are correctly configured and that they align with the From address domain. This is crucial for DMARC to function correctly.
- Verify that your SPF record includes all legitimate source IP addresses for your domain.
- Set up DKIM signing for your domain and verify that the signatures are correctly applied to outgoing mail.
Monitor DMARC Reports: If you have configured the rua and ruf tags in your DMARC record, you will receive aggregate and forensic reports. Monitor these reports to understand how your emails are being processed and to identify any issues.
Use Troubleshooting Tools: Utilize online DMARC checkers or tools that can help you analyze your DMARC configuration and provide insights into any potential issues.
Consult Documentation: Refer to Microsoft documentation for specific guidance on DMARC setup and troubleshooting within the Microsoft 365 environment.

By following these steps, you can effectively check and troubleshoot your DMARC configuration to resolve issues with emails being flagged as harmful.

References: