Microsoft 365 · Email
Service group: Microsoft 365Business email that arrives, authenticates and stays protected
Exchange Online carries your client correspondence, invoices and approvals. We keep it working: mail flow and connectors, SPF, DKIM and DMARC for your domains, Exchange Online Protection and Defender for Office 365 policies, and the mailbox and Outlook issues your staff run into.
At a glance
- Service
- Configuration, troubleshooting and ongoing support for Exchange Online mailboxes, mail flow and email protection
- Best suited to
- Canadian organizations of roughly 5 to 200 employees using Microsoft 365 for business email
- Core inclusions
- Mail flow and connectors, domain authentication (SPF, DKIM, DMARC), anti-spam and anti-phishing policies, quarantine handling, mailbox and Outlook troubleshooting (as scoped)
- Not included by default
- Third-party email security gateways, email archiving subscriptions, legal eDiscovery work, marketing email platforms and licence purchases
- Pricing basis
- Included in Microsoft 365 Managed Services or quoted per user or per project; confirmed in a written quotation
What Exchange Online support covers
Exchange Online is the email and calendar service inside Microsoft 365. Every tenant with Exchange Online includes Exchange Online Protection, which filters spam, malware and known phishing. Plans such as Business Premium add Microsoft Defender for Office 365 Plan 1, with Safe Links and Safe Attachments that check URLs and files at the time they are opened.
Our Exchange Online service focuses on the email system itself: making sure messages reach the right place, that your domains are properly authenticated so others trust your mail, that filtering policies are tuned rather than left at defaults, and that mailbox, calendar and Outlook problems are resolved quickly.
Creating users and shared mailboxes is part of Microsoft 365 Administration. Broader email threat strategy, user training and phishing response sit under our Email Security and Microsoft 365 Security services. This page is about operating Exchange Online well.
Email problems we resolve
Messages landing in clients’ junk folders
Missing or incorrect SPF, DKIM and DMARC records make your legitimate mail look suspicious, especially to large mailbox providers that now enforce authentication.
Apps and printers that cannot send
Scanners, accounting software and websites relay mail through old settings or basic authentication that Microsoft has retired.
Phishing getting through
Default filtering lets impersonation attempts reach staff, and nobody reviews quarantine or reported messages.
Unexplained forwarding and rules
Inbox rules forward mail externally or delete messages, sometimes set by a user and sometimes by an attacker after a compromised sign-in.
What we configure and support
Domain authentication
SPF records that include every legitimate sender, DKIM signing enabled for each domain, and a DMARC policy moved from monitoring toward enforcement with report review.
Exchange Online Protection
Anti-spam, anti-malware and anti-phishing policies tuned for your business, using Microsoft’s preset security policies as a starting point.
Defender for Office 365
Where licensed, Safe Links, Safe Attachments and impersonation protection for executives and domains, with quarantine policies agreed with you.
Mail flow and connectors
Transport rules for disclaimers and routing, connectors for third-party services, and modern SMTP relay options for devices and applications.
Mailbox and Outlook troubleshooting
Calendar sharing, delegation, Outlook profile and sync issues, mailbox size and archive management, and message trace investigations.
Forwarding and rule controls
Outbound spam policies that control automatic external forwarding, and review of suspicious inbox rules.
What is included, and what needs separate scope
Typically included
- SPF, DKIM and DMARC configuration for your Microsoft 365 domains
- Exchange Online Protection policy configuration and tuning
- Defender for Office 365 Plan 1 policies where licensed
- Quarantine release requests and false-positive handling
- Mail flow rules, connectors and SMTP relay configuration
- Message trace and delivery troubleshooting
- Mailbox, calendar and Outlook client support for covered users
- Online archive and mailbox size management
Requires separate scope or quotation
- Third-party email security gateway subscriptions
- eDiscovery for litigation or regulatory investigations
- Bulk marketing email platforms and their domain setup
- Migrations from other email systems
- Microsoft licence purchases, unless written into your proposal
Components involved
- Exchange admin centre and Exchange Online PowerShell
- Exchange Online Protection
- Microsoft Defender for Office 365 Plan 1 and Plan 2 features
- Microsoft Defender portal quarantine and submissions
- DNS records for SPF, DKIM, DMARC, MX and Autodiscover
- Outlook for Windows, Mac, web and mobile
- Exchange Online Archiving and Microsoft Purview retention basics
Who this service suits
Businesses that invoice by email
Organizations whose cash flow depends on invoices and statements reaching clients’ inboxes.
Firms targeted by impersonation
Accounting, legal and real estate businesses where fraudulent payment requests are a constant concern.
Offices with many sending systems
Companies with scanners, line-of-business apps and websites that all need to send mail as your domain.
What improves
- Your domain authenticated, so receivers can trust mail from you
- Fewer phishing and impersonation messages reaching staff
- Devices and apps sending mail through supported methods
- Faster answers when a message goes missing, using message trace
- Visibility of suspicious forwarding and inbox rules
How we approach Exchange Online
Review
We check DNS records, protection policies, connectors, forwarding settings and recent delivery problems.
Plan changes
We list every legitimate sender for your domains and agree the order of authentication and policy changes.
Implement in stages
DKIM is enabled, SPF corrected, and DMARC begins in monitoring mode before stricter policies are applied.
Tune and support
We review DMARC reports and quarantine, adjust policies and resolve mailbox issues as they come up.
Ways to engage
All arrangements are confirmed by a written quotation.
Email authentication project
A one-time project to configure SPF, DKIM and DMARC across your domains with a staged path to enforcement.
Ongoing Exchange support
Exchange Online support within Microsoft 365 Managed Services or a Managed IT package.
Security assessment
A Microsoft 365 Security Assessment that includes email protection configuration.
Frequently asked questions
Isn’t spam filtering already included in Microsoft 365?
Yes. Exchange Online Protection is included with Exchange Online. It works better when policies are tuned, quarantine is reviewed and your domain authentication is correct. Defender for Office 365 adds further protection where licensed.
What is DMARC and do we need it?
DMARC tells receiving servers what to do with mail that fails SPF or DKIM checks for your domain, and sends you reports. Large mailbox providers increasingly expect it, and it makes spoofing your domain harder.
Our scanner stopped sending email. Can you fix it?
Usually. Microsoft has retired basic authentication for most protocols, so older devices need a supported method such as a connector-based relay or direct send. We pick the option that fits the device.
Can you recover a deleted email?
Within Microsoft’s retention windows, often yes. Beyond them, recovery depends on retention policies or a separate Microsoft 365 backup, which we cover under Microsoft 365 Backup.
Related services
Products and packages
Industries we support
Service areas
Get your email delivered and protected
Book a consultation to review mail flow, domain authentication and protection policies. Pricing is confirmed in a written quotation.