check before: 2025-06-06
Product:
Entra, Exchange, Microsoft 365 suite
Platform:
Online, US Instances, World tenant
Status:
Change type:
Feature update, User impact, Admin impact
Links:
Details:
Summary:
Tenant admins can now use the Remove-DkimSigningConfig cmdlet in Exchange Online PowerShell (v3.7) to remove obsolete DKIM configurations without Microsoft support. This feature is available worldwide by June 2025 and requires appropriate roles and module updates for self-managed DKIM cleanup.
Details:
[Introduction]
To improve self-service capabilities and reduce support dependency, Microsoft has made the Remove-DkimSigningConfig cmdlet available to tenant administrators. This cmdlet enables admins to remove obsolete DomainKeys Identified Mail (DKIM) signing configurations directly from Exchange Online PowerShell, helping clean up configurations when domains are removed from a tenant.
[When this will happen]
This feature is already enabled worldwide, including in special clouds. Rollout dates:
Worldwide: June 6-10, 2025
GCCHigh: August 6-12, 2025
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-10-22
updated:
2025-10-22
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Obsolete DKIM Configuration Management
Without proper preparation, tenant admins may inadvertently remove necessary DKIM configurations, leading to email delivery issues and increased spam filtering for legitimate emails.
- roles: Tenant Administrator, Security Administrator
- references: https://learn.microsoft.com/powershell/exchange/exchange-online-powershell?view=exchange-ps, https://learn.microsoft.com/powershell/module/exchangepowershell/remove-dkimsigningconfig?view=exchange-ps
User Experience Degradation
If DKIM configurations are removed without proper checks, users may experience disruptions in email communication, resulting in potential loss of important messages and decreased trust in email authenticity.
- roles: End Users, IT Support Staff
- references: https://learn.microsoft.com/powershell/exchange/exchange-online-powershell?view=exchange-ps, https://learn.microsoft.com/powershell/module/exchangepowershell/remove-dkimsigningconfig?view=exchange-ps
Configutation Options**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 2 weeks ago ago