Microsoft 365 Certified: Administrator ExpertDeploy and manage a Microsoft 365 tenantHard

A Microsoft 365 administrator is preparing to decommission a custom domain, 'olddomain.com', from their Microsoft 365 tenant. The administrator has already removed all users and groups associated with 'olddomain.com'. Before attempting to remove the domain, what is the next critical prerequisite the administrator must ensure is met?

  1. AUpdate all SPF and DKIM records for the domain.
  2. BChange the default domain for new users to another verified domain.
  3. CEnsure no mail-enabled public folders use the domain.
  4. DVerify that no SharePoint Online sites are using the domain for external sharing.
Show answer & explanation

Correct answer: C. Ensure no mail-enabled public folders use the domain.

Before a domain can be removed from Microsoft 365, all references to it must be cleared. This includes ensuring no mail-enabled public folders or distribution lists are using the domain, as these objects might not be directly associated with users or groups.

Why the other options are wrong

  • A. SPF and DKIM records are external DNS records; updating them is part of a clean exit, but not a blocking prerequisite for *removing* the domain from the tenant itself.
  • B. While a good practice, changing the default domain for new users doesn't directly block the removal of an existing domain.
  • D. SharePoint Online sites use the tenant's primary domain or site collection URLs, not typically directly linking to custom email domains in a way that blocks domain removal.

M365 Domain Removal Prerequisites

A set of conditions that must be met before a custom domain can be successfully removed from a Microsoft 365 tenant, primarily ensuring no objects or services are still dependent on it.

  • All users, groups, and contacts must be updated or removed.
  • No mail-enabled public folders or distribution lists can use the domain.
  • The domain cannot be the primary domain for the tenant or any user.

Memory trick: Empty the domain's pockets before it leaves.

More Deploy and manage a Microsoft 365 tenant questions