Microsoft 365 Cold Email Setup Checklist for Better Inboxing
M365 cold email setup has more moving parts than Google Workspace and more opportunities for subtle misconfiguration. Here's the complete checklist.
You want to set up Microsoft 365 for cold email the right way from the start. M365 cold email setup has more moving parts than Google Workspace and more opportunities for subtle misconfiguration that tanks deliverability before you send your first campaign. Getting it right upfront saves weeks of troubleshooting later.
Domain Preparation
Register your domain at least 30 days before you plan to send cold email. Domain age affects reputation on both Microsoft's and Google's systems.
Use a dedicated domain for cold outreach, not your primary business domain. This isolates risk — if outreach generates complaints, your business email is unaffected.
Set up a working redirect on the sending domain. A domain that points nowhere looks like spam infrastructure. Check with the redirect checker.
Authentication Configuration
SPF: Add a TXT record to your DNS: v=spf1 include:spf.protection.outlook.com -all. Ensure you have only one SPF record and that total DNS lookups don't exceed 10. Verify with the SPF checker.
DKIM: In the Microsoft 365 admin center, go to Exchange → DKIM. Add the two CNAME records Microsoft provides (selector1._domainkey and selector2._domainkey). After DNS propagates, return to the admin center and enable DKIM signing. Verify both selectors with the DKIM checker.
DMARC: Add a TXT record: _dmarc.yourdomain.com with v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. This meets the minimum requirement. Verify with the DMARC lookup.
Custom Tracking Domain
Set up a CNAME record for your tracking subdomain pointing to your outreach tool's tracking infrastructure. Make sure it's NOT proxied through Cloudflare. Verify with the tracking domain checker.
Sending Limits and Warmup
Begin warmup immediately after setup. Use an automated warmup tool that generates opens and replies. Start at 5–10 messages per day from each inbox. Warmup should run for at least 2–4 weeks before any cold outreach. Use the sending limit planner with M365 selected to configure your ramp correctly (max 10/day for cold email on M365).
Keep warmup running continuously, even between campaigns.
Pre-Launch Verification
Before launching campaigns, run a placement test against Outlook.com, Gmail, and Yahoo seed accounts. Verify inbox placement across all providers — target 80% or better. Check the warmup readiness checker to confirm all signals are green.
Run the blacklist checker on your domain and sending IP to confirm clean status.
Monitoring
Register for Microsoft SNDS to monitor your IP reputation. Register for JMRP to receive complaint feedback. Set up Google Postmaster Tools to monitor Gmail reputation in parallel.
Use the launch checklist to verify all of these before the first campaign send.
When to Replace Instead of Repair
If you follow this checklist, you should not need to repair or replace early. The whole point is avoiding the mistakes that cause damage in the first place.
However, if you need M365 inboxes performing today and can't wait weeks for this process, WarmInboxes provides accounts that have already been through this entire setup and warmup process. This is especially useful for agencies onboarding new clients who need campaigns live within days rather than weeks.
Mistakes That Make This Worse
- Skipping domain aging
- Not enabling DKIM signing in the admin center after adding DNS records
- Having multiple SPF records
- Starting cold outreach before warmup is complete
- Not testing inbox placement before production sends
- Not monitoring SNDS and JMRP
Run the checks first
Before replacing anything, run a free inbox placement test. You might find the issue is DNS, not the domain — and save yourself a week of unnecessary work.