'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Add a Microsoft 365 Subdomain Without Parent-Domain DNS Access
Question details
The user needs to verify and add a subdomain to Microsoft 365 but lacks administrative access to the parent domain's DNS records.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Setting up Microsoft 365 services on a subdomain that is managed separately from its parent domain.
- Observed behavior
- Microsoft 365 requires domain verification via DNS records, which is blocked because the user cannot access the parent domain's DNS zone.
Ensure you know which DNS provider or registrar specifically manages your delegated subdomain, and verify that you have administrative login credentials for that platform.
Verify the Subdomain Using Its Dedicated DNS Provider
Obtain access to the specific subdomain's DNS settings to add the required Microsoft 365 verification records independently of the parent domain.
When a subdomain is delegated to a separate DNS zone, it operates independently of the parent domain. Microsoft 365 allows you to verify ownership by adding a TXT record directly to this delegated subdomain's DNS records.
Log in to the domain registrar or DNS hosting provider that specifically manages your subdomain's DNS records.
Navigate to the DNS management, Zone Editor, or Advanced DNS settings section for your specific subdomain.
Create a new TXT record. Enter the verification value (e.g., MS=msXXXXXX) provided to you in the Microsoft 365 admin center setup wizard.
If you are also configuring services like Exchange Online, add the necessary MX, CNAME, and SRV records directly to the subdomain's DNS settings.
Return to the Microsoft 365 admin center and click the 'Verify' button to confirm the DNS changes and complete the domain setup.
Looking for a Lightweight Office Suite? Try WPS Office
While managing Microsoft 365 domains and administration can be complex, everyday office tasks shouldn't be. WPS Office provides a free, lightweight, and highly compatible alternative for creating, editing, and sharing documents without requiring complex administrative setups.
- 1. Download the Installer: Visit the official WPS Office website and click the Free Download button.
- 2. Install the Software: Run the downloaded installer file and follow the simple on-screen instructions to set up WPS Office on your device.
- 3. Start Creating: Open Writer, Spreadsheets, or Presentation to immediately start working on your documents with full Microsoft format compatibility.
Frequently Asked Questions
Can I verify a subdomain if I only have the ability to add CNAME records?
Microsoft 365 typically requires a TXT record for domain verification. In some specific cases, an MX record can be used, but TXT is the standard and most secure method. A CNAME record alone is not sufficient for initial domain verification.
Do I need the parent domain owner to approve or change anything?
If the subdomain has already been fully delegated to its own DNS zone that you control, the parent domain owner does not need to intervene. You can manage verification entirely within the subdomain's own DNS settings.
What if my subdomain DNS provider does not support TXT records?
Most modern DNS providers fully support TXT records. If your provider restricts this, you will need to contact their support team to add the record manually, or you may need to migrate your subdomain's DNS hosting to a provider that offers full DNS record management.
