Volume 23 Issue 11

Today's Highlights:

• Implementing DKIM
• Implementing DMARC
• Autocomplete only uses the first letters of a name
• iCloud Contacts are not showing in Address Book

Implementing DKIM

A user needed help configuring DKIM and DMARC settings in his Office 365 tenant:

I have made the switch to EXCHANGE... But, I cannot find any place in the Office 365 documentation to set up DKIM / DMARC?

The good news: if you have only one custom domain that sends mail set up in your Office 365 tenant, you don’t have to do anything if you added the DNS records for your domain, including the SPF record. (All domains that send mail, including those hosted elsewhere, should have an SPF record).

Office 365 creates a private and public key pair, enables DKIM signing, and configures the Office 365 policy for your custom domain internally and uses it if you don’t have a DKIM record in DNS.

However, you should set up DKIM records if you have more than one domain that sends mails hosted in your tenant, if you are also going to use DMARC, or if you send mail through other hosts, such as a bulk mail service.

To set up DKIM, you need to publish two CNAME records for each domain in your tenant.
The format is simple:
The CNAME is selector1._domainkey.yourdomain.com which points to your tenant: selector1-yourdomain-com._domainkey.tenantname.onmicrosoft.com

Create a second CNAME for selector2, using the same format as above.

Repeat for each domain in your tenant that sends mail. For example, I have slipstick.com and cdolive.com in my tenant and needed to create two CNAME records for each domain name.

After you create the DNS records, you need to enable DKIM in the Exchange admin or using PowerShell:

New-DkimSigningConfig -DomainName yourdomain.com -Enabled $true

Tip: if the CNAME record isn’t correct or isn’t published, when you run the cmdlet, the failure message will include the correct record to add.

If you prefer changing this in the admin center, log into the Exchange admin center, open the DKIM setting under Protection. Select the domain and click Enable on the right. As with the PowerShell method, if the correct CNAME are not published, an alert will give you the correct names to use.

To verify it is correct, send an email to an Outlook.com or Gmail address and check the header. (Gmail’s Show original command will display the results for SPF, DKIM, and DMARC in a simplified format at the top of the page.)

The header entry will look similar to the following samples. The first example is using the default Office 365 DKIM record:

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=Cdolive.onmicrosoft.com; s=selector1-slipstick-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh={hash code}; b={signed field}

Once the custom DKIM record is created, DKIM in the header looks like this:

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= slipstick-com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh={hash code}; b={signed field}

Implementing DMARC

To use DMARC you will need to set up SPF and DKIM for your domain (and verify both are correct), before adding the DMARC TXT record to DNS.

Your choices for the policy are none, quarantine or reject. It’s recommended that you start with “none” so you can gauge the impact, especially if you are using third-party mailers to send mail from this domain, before moving to quarantine, or reject.

TXT:_dmarc.yourdomain.com
Value: "v=DMARC1; p=quarantine"

To check the results, send a test message to Outlook.com or Gmail address and check the header.
Gmail’s Show original option displays the following information:

Message ID <{code}.namprd05.prod.outlook.com>
Created at: {date} (Delivered after 4 seconds)
From: Diane Poremsky <{me}@mydomain.com>
To: "{me}@gmail.com" <{me}@@gmail.com>
Subject: testing
SPF: PASS with IP {address}
DKIM: 'PASS' with domain mydomain.com
DMARC: 'PASS'

Autocomplete only uses the first letters of a name

Every few months someone asks if there is a way for Outlook to search in any part of the name or address string for autocomplete suggestions. They want to show any entry that has a match anywhere in the display name or address.

Autocomplete looks at the beginning of the display name and the beginning of the email address; it doesn't search for matches within those fields.

For example, if you are emailing Chris Johnson (shazzam@domain.web), Outlook should bring up the address in the list if you type c (first letter in Chris) or s (first letter in shazam), but not j.

If the address is in the autocomplete list as Johnson, Chris(shazzam@domain.web), typing either j or s will include the address in the list, but not c.

There is no way to make Outlook search within the words (such as typing "son" to find "Johnson"), however, the new autocomplete list may suggest entries where the letters match the first letter in any word in the display name, especially when there aren't other potential matches.

You can change the display name format for your contacts so they are in first name last name order. This may help with some of the autocomplete entries, but not all, as Outlook picks up the display name from messages you reply to.

To change the display name order in Outlook, go to File, Account Settings and open the Account Settings dialog. Switch to the Address Books tab and double click on the Outlook Address Book. Choose First Last format at the bottom.

iCloud Contacts are not showing in Address Book

My problem is with the iCloud contacts in the Address Book. The contacts are not to be found in the Address Book or any reference to them under Account Settings – Address Books.

Well, they won't be listed separately in File, Account Settings, Address books. The iCloud Contacts are part of the Outlook Address Book. If you double click on the Outlook Address Book, you'll see a list of all Contacts folders that are enabled as Address books. iCloud should be on this list. If it's not, see the information at the end of this article.

The usual reason the iCloud Contacts aren't visible in the address book is because you're looking at the wrong address list.

To check which address book Outlook is using, you need to open the Address Book dialog.

1. Click the Address Book button on the Home menu or press Ctrl+Shift+B.
2. If the iCloud address book is displayed in the Address book selector, but you cant see any contacts, select Name only for Search on the left. When More columns is selected, you'll only see contacts when you type something in the search field.
3. If iCloud is not the default address book, click Tools, Options.
4. Select the iCloud contacts from the menu at the bottom of the dialog.
5. If you have more than one Contacts folder that has contacts in it, you may want to set iCloud to be searched first (at the top of the dialog).

Now when you click the To button, you'll see the iCloud contacts.

New & Updated Exchange KB Articles

April 3, 2018, update for Outlook 2016 (KB4018326)
https://support.microsoft.com/kb/4018326

"Active Directory property ‎'homeMDB‎' isn't writeable on recipient" error when moving a mailbox to Office 365
https://support.microsoft.com/kb/4131514

Get-Help cmdlet for Exchange Server 2016 fails on Windows Server 2016
https://support.microsoft.com/kb/4131512

Hybrid free/busy lookups fail between Exchange Server 2016 CU8 and O365
https://support.microsoft.com/kb/4058297

New & Updated Office 365 KB Articles

April 3, 2018, update for Office 2016 (KB4011667)
https://support.microsoft.com/kb/4011667

Can't access a hidden mailbox in Outlook after a migration to Office 365 hybrid environment
https://support.microsoft.com/kb/4034273

Duplicate primary calendars in Office 365 Dedicated/ITAR
https://support.microsoft.com/kb/4101519

Hybrid free/busy lookups fail between Exchange Server 2016 CU8 and O365
https://support.microsoft.com/kb/4058297

"550 5.1.1" NDR when sending a calendar invitation or meeting request to a former delegate
https://support.microsoft.com/kb/4131522

New & Updated Outlook KB Articles

April 3, 2018, update for Outlook 2016 (KB4018326)
https://support.microsoft.com/kb/4018326

How to scan Outlook by using the Microsoft Support and Recovery Assistant tool
https://support.microsoft.com/kb/4098558

Office 2016 for Mac 16.9 or later prompts you for authentication
https://support.microsoft.com/kb/4132278

Outlook crashes when you call IMAPIProp::GetProps on a stale MAPIOBJECT
https://support.microsoft.com/kb/4131515

Other Resources

iCloud error: Outlook isn't configured to have a default profile
Users are reporting problems configuring iCloud in Outlook on brand new computers. When they check the box for Mail, Contacts, Calendars they receive and error error message that there is no default profile.

Security Certificate Warning in Microsoft Outlook
Error message: The server you connected to is using a security certificate that cannot be verified.

Setting Custom Reminder Times
How to enter a custom reminder or snooze time in Microsoft Outlook.

Drag to Reorder the To-Do List
You can reorder Tasks by dragging them up and down Outlook's To-Do List. You can also change values by dragging task to a new group.

Outlook Search fails to find messages
How to enable Outlook search if Instant search isn't returning results.