Tenant Migration

Stopping Inbound Mail Flow During Office 365 Tenant Migration

Steven ParkerSteven Parker Nov 2, 2026 869 views

Question details

The administrator is seeking technical clarification on whether inbound mail flow must be temporarily stopped by pointing the MX record to an unreachable domain during an Office 365 tenant migration.

Is Inbound Mail Flow Required During an Office 365 Tenant Migration?
Product
Microsoft Office 365
Device & OS
not provided
Scenario
Performing an Office 365 tenant-to-tenant migration and configuring domain DNS settings for email routing.
Observed behavior
Administrators are instructed to change the primary MX record to an unreachable domain to pause inbound mail delivery during the migration process.
Before you start

Before making any DNS changes, ensure you have clearly communicated the expected email downtime to all users and backed up your current DNS zone records.

Solution 1Recommended

Temporarily Route MX Records to an Unreachable Domain

Change your MX records to halt incoming emails, ensuring no messages are delivered to the old tenant while the domain is being detached and attached.

Stopping inbound mail flow is a technical necessity during traditional tenant-to-tenant migrations. When you remove a custom domain from the source tenant, any emails sent to that domain will bounce permanently if the MX record still points to the old environment.

By pointing the MX record to an unreachable domain (acting as a 'black hole'), external sending mail servers will fail to connect. Instead of rejecting the email, they will queue the messages and retry delivery later. Once the domain is successfully verified in the destination tenant and the MX record is updated, the queued emails will be delivered normally without data loss.

1
Access your DNS hosting provider

Log in to the control panel of your domain registrar or DNS hosting provider where your custom domain's DNS records are managed.

2
Locate the primary MX record

Find the existing MX record pointing to your current Office 365 source tenant (typically formatted as yourdomain-com.mail.protection.outlook.com).

3
Change the MX record destination

Edit the MX record to point to an unreachable or invalid domain (e.g., unreachable.example.com) to force external sender servers to queue incoming emails.

4
Update to the destination tenant

After the domain is successfully moved and verified in the new Office 365 tenant, update the MX record to point to the new destination tenant's mail servers.

Temporarily Route MX Records to an Unreachable Domain
Microsoft Documentation Updates: For newer Microsoft cross-tenant migration methods, the exact requirements for MX record changes may vary. Always refer to the latest official Microsoft documentation for your specific migration path.
Free Microsoft Office alternative

Consider WPS Office for Your Organization's Document Needs

While planning your complex tenant migrations and IT infrastructure changes, consider evaluating your organization's office software suite. WPS Office is a lightweight, highly compatible alternative to Microsoft Office that can significantly reduce your IT licensing costs.

  1. 1. Visit the official WPS website: Navigate to wps.com to download the enterprise or free version of WPS Office.
  2. 2. Install the software: Run the downloaded installer and follow the on-screen prompts to deploy the suite.
  3. 3. Open existing documents: Open any existing Microsoft Office files directly in WPS Office without losing format fidelity.
Seamlessly compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Provides a lightweight and cost-effective office solution while managing tenant migrationsFamiliar user interface reduces the learning curve for migrating teamsBuilt-in PDF editing and advanced document collaboration features
microsoft office alternative - wps office

Frequently Asked Questions

What happens if I do not change the MX record during a tenant migration?

If you leave the MX record pointing to the source tenant, emails delivered during the domain removal and attachment phase may bounce back to the sender permanently as undeliverable, leading to lost communications.

How long should the MX record point to the unreachable domain?

The MX record should remain unreachable only for the duration of the domain detachment from the old tenant and attachment to the new tenant. Once the domain is verified in the new environment, update the MX record immediately.

Will senders receive a bounce-back message while the MX record is unreachable?

In most cases, sending servers will not issue an immediate bounce-back. Instead, they will queue the email and retry delivery periodically for a set period (usually 24 to 72 hours), allowing sufficient time for your migration to complete.

Does this MX record routing process apply to all types of Office 365 migrations?

This step is primarily required for traditional tenant-to-tenant migrations involving domain moves. Newer cross-tenant synchronization tools may handle mail routing seamlessly, so always consult Microsoft's specific migration guides.