Microsoft Entra Domain Verification Issue for New Users

Question

Microsoft Entra Domain Verification Issue for New Users

VEERABHADRAPPA 0

We have Microsoft subscriptions for 10 users. Out of these, 4 users were created 20–30 days ago and are currently active.

However, when we tried to create the 5th user three days ago, we were unable to view all users in the Microsoft Entra account for our domain. During the process, we received the following error message:

“Verification will not succeed until you have configured your domain with your registrar as described above.”

We updated the required DNS records with our domain registrar, and after checking through DNS Checker, all records are showing green across locations. Despite waiting for 3 days, the issue still persists. When we click on “Verify,” we continue to receive the following error:

“Verify domain name Failed to verify domain name.”

Please help us resolve this issue.

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-25T02:45:51.3333333+00:00

VEERABHADRAPPA

Thank you for reaching out to Microsoft Q&A.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document: Common verification issues

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If it doesn't work for you, et us know, we are happy to assist you further!
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-27T02:41:09.96+00:00

VEERABHADRAPPA

Following up to check if the resolution provided was helpful. Let us know if you need any further assistance.

1 answer

Your answer

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-25T02:45:51.3333333+00:00

VEERABHADRAPPA

Thank you for reaching out to Microsoft Q&A.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document: Common verification issues

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If it doesn't work for you, et us know, we are happy to assist you further!
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-27T02:41:09.96+00:00

VEERABHADRAPPA

Following up to check if the resolution provided was helpful. Let us know if you need any further assistance.

Answer 1

The error indicates that Microsoft 365 / Microsoft Entra still cannot see a correct verification record for the custom domain, even though records appear correct in public DNS checkers. Troubleshooting must focus on the authoritative DNS zone and the exact TXT/MX verification record value.

Use these steps end-to-end:

Confirm the domain’s authoritative DNS
- Go to an authoritative DNS lookup tool such as the Dig web interface mentioned in the documentation.
- Select TXT (or MX if using MX-based verification), set Nameservers to Authoritative, enter the domain name, and run the query.
- Verify that the output contains the Microsoft 365 verification record (TXT starting with MS= or the specific MX record provided during domain setup).
- If the expected TXT/MX record is not present in the authoritative result, the record is either missing or configured at the wrong DNS host.
Verify the exact verification record value
- In the Microsoft 365 admin center, go to Setup > Domains, select the domain, and review the verification instructions.
- Ensure the TXT record at the DNS host:
  - Includes the full value, including the MS= prefix.
  - Matches exactly (no extra spaces, quotes, or altered characters).
- Common issues:
  - MS= was omitted.
  - The record was added as a different type (e.g., as an SPF TXT or as a CNAME instead of the required TXT/MX).
Make sure the record is saved in the correct DNS zone
- If the domain’s nameservers point to Microsoft 365 (for example, ns1.bdm.microsoftonline.com, etc.), DNS is managed in Microsoft 365, not at the registrar.
- In that case, any TXT/MX records added only at the registrar will be ignored.
- Ensure the verification TXT/MX record is added in the authoritative DNS zone (for example, via Microsoft 365 admin center > Settings > Domains > [your domain] > DNS records/Manage DNS if Microsoft 365 is authoritative).
Confirm the record is visible without propagation delay
- Use an authoritative lookup again (TXT or MX, Nameservers = Authoritative) and confirm the verification record appears exactly as required.
- The documentation notes that authoritative queries have no propagation delay; if the record appears there, Microsoft 365 should be able to verify it. If it does not appear, the DNS configuration is still incorrect.
Retry verification in Microsoft 365
- After confirming the record is correct and visible in an authoritative lookup, return to Setup > Domains in the Microsoft 365 admin center and select Verify again.
- Although global DNS propagation can take up to 48–72 hours, authoritative visibility usually means verification should succeed within minutes to a few hours.
If verification still fails
- If the authoritative lookup shows the correct TXT/MX record and verification still fails after a reasonable wait, use built-in troubleshooting and support:
  - In the Microsoft 365 admin center, go to Setup > Domains, check the Status column, and select Check health for the domain to see any specific issues reported.
  - If the problem persists, open a support ticket:
    - In the admin center, select Help & Support, describe the domain verification issue, and then choose Contact support.
- The domain verification KB articles referenced in the documentation (such as the one for “Sorry, we can't find the record you created” and “Can't verify domain”) provide targeted guidance based on the exact error text.

Once the domain is successfully verified, new Microsoft Entra ID users can be created and associated with that domain without further domain verification prompts.

References: