MC516348 – Updated March 16, 2023: Microsoft has updated the rollout timeline below. Thank you for your patience.

As part of the DMARC (Domain-based Message Authentication Reporting & Conformance) standard, the owner of the domain whose MX is pointed to Office 365 can request DMARC aggregate reports through the RUA of the DMARC record. This will help the domain owner to monitor their domain’s traffic passing through Office 365 and adjust their sender authentication configurations to reach an actionable DMARC policy.

This message is associated with Microsoft 365 Roadmap ID 109535

When this will happen:

Standard Release: Microsoft will begin rolling out mid-March (previously mid-February) and expect to complete by late March.

How this will affect your organization:

Domain owners will receive DMARC reports to RUA email addresses.

What you need to do to prepare:

DMARC reports are only sent to domains whose MX is pointed to O365. In order to obtain DMARC aggregate reports for your domain, it must have a valid DMARC record that includes a valid RUA email address.

You can learn more about DMARC here