Microsoft 365 Cold Email Setup Checklist for Better Inboxing
M365 cold email setup has more moving parts than GWS and more opportunities for misconfiguration. Here's the complete setup checklist to get it right from the start.
You want to set up Microsoft 365 for cold email the right way from the start. You have seen too many setups go wrong and want a methodical approach that avoids the common pitfalls.
Domain preparation
Domain checklist
- Register your domain at least 30 days before you plan to send cold email (60 days preferred for M365)
- Use a dedicated domain for cold outreach, not your primary business domain
- Confirm root domain redirects correctly (http → https, both root and www) with the redirect checker
- Verify SSL certificate is valid and not expiring soon
- Check domain expiry is 12+ months away with the domain expiry checker
Microsoft 365 authentication configuration
Authentication checklist
- SPF record published:
v=spf1 include:spf.protection.outlook.com -all— verify with SPF checker - Only one SPF record on the domain
- DKIM: enabled in Microsoft 365 Defender portal (not just DNS records published)
- Both selector1 and selector2 CNAME records published in DNS and active — verify with DKIM checker
- DMARC record published with rua tag — verify with DMARC lookup
- MX records configured for reply routing — verify with MX checker
Tracking domain setup
Tracking checklist
- Tracking domain is completely separate from sending domain
- Tracking domain CNAME points to correct ESP destination
- Tracking domain is NOT proxied through Cloudflare (grey cloud not orange) — verify with tracking domain checker
- Tracking domain has valid SSL
Sending infrastructure
Sending setup checklist
- Maximum 3 inboxes per sending domain
- Warmup tool connected and running — use the warmup readiness checker before going live
- Sending limits configured: 2–3/day in week 1, ramp to 10/day max for M365 — use sending limit planner
- MX records configured so the inbox actually receives mail (important for domain legitimacy signals)
Pre-launch health checks
Pre-launch checklist
- Domain not listed on any major blacklist — check with blacklist checker
- Inbox placement test passes — test at /test
- Register for Microsoft SNDS to monitor IP reputation
- Register for JMRP to receive Microsoft complaint feedback
- List has been cleaned and verified before first send
Repair or replace?
If you follow this checklist, you should not need to repair or replace early. The whole point is avoiding the mistakes that cause damage in the first place.
However, if you need M365 inboxes performing today and cannot wait weeks for this process, WarmInboxes provides accounts that have already been through this entire setup and warmup process. This is especially useful for agencies onboarding new clients who need campaigns live within days rather than weeks.
Run the checks first
Before replacing anything, run a free inbox placement test. You might find the issue is DNS, not the domain — and save yourself a week of unnecessary work.