T The Triage ManualTechnical Guides for IT Emergencies
P3 · Exchange & Mail Flow

Exchange Online Mail Flow Disruption: onmicrosoft.com Outbound and Direct Send Changes

Microsoft's upcoming Exchange Online service changes will impact tenants sending outbound mail via the default onmicrosoft.com domain and those relying on Direct Send for inbound routing. The Change Optics Report, available in public preview within the Exchange Admin Center, proactively surfaces affected mail flows before enforcement occurs. Administrators must identify impacted senders, reconfigure outbound connectors to use verified custom domains, and migrate Direct Send sources to SMTP AUTH or an approved relay method to prevent post-enforcement mail flow failures.

Indicators

Likely causes

Diagnostic steps

  1. Sign in to the Exchange Admin Center (EAC) at https://admin.exchange.microsoft.com
  2. Navigate to the Change Optics Report section within the EAC (currently available in public preview) to view all mail flows identified as impacted by upcoming service changes
  3. Review the report for outbound mail identified as being sent from the default onmicrosoft.com domain and record the sending sources (applications, connectors, or services)
  4. Review the report for incoming Direct Send traffic and identify all responsible devices, applications, or services by IP address or hostname where possible
  5. Use Message Trace in the EAC to correlate Change Optics findings with actual sent/received messages to confirm scope and volume of affected traffic
  6. For each affected outbound mail source, reconfigure the sending application or connector to use a verified custom domain as the sender address instead of the onmicrosoft.com domain
  7. For each Direct Send source, migrate the configuration to SMTP client submission (SMTP AUTH on port 587) or a Microsoft 365 SMTP relay connector compliant with upcoming requirements
  8. Re-check the Change Optics Report after making changes to confirm the previously flagged mail flows are no longer listed as affected
  9. Run message traces post-change to validate that mail is flowing correctly from reconfigured sources with no delivery failures

Resolution path

Prevention

Tools

References

Exchange OnlineMail FlowChange Optics ReportEACDirect Sendonmicrosoft.comMicrosoft 365SMTP AUTHOutbound MailService ChangePublic PreviewConnectorSMTP Relay