Set Up Your EOP Service
Topic Last Modified: 2014-02-10
This topic walks you through Microsoft Exchange Online Protection (EOP) setup.
Estimated time to complete this task: 1 hour
To configure connectors, your account must be an an Office 365 Global Admin, or an Exchange Company Administrator (the Organization Management role group). For information about how Office 365 permissions relate to Exchange permissions, see Permissions in Office 365.
If you haven’t signed up for EOP, visit Exchange Online Protection and choose to buy or try the service.
For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.
In the Office 365 admin center, navigate to Setup to add your domain to the service.
Follow the steps to add the applicable DNS records to your DNS-hosting provider in order to verify domain ownership.
Create connectors in the Exchange admin center (EAC) that enable mail flow between EOP and your on-premises mail servers. For detailed instructions, see Set Up Mail Flow Through Exchange Online Protection.
Use the Remote Connectivity Analyzer to run a test that checks mail flow between the service and your environment. For more information, see the “Use the Remote Connectivity Analyzer to test email delivery” section in Test Mail Flow with the Remote Connectivity Analyzer.
Follow the Office 365 domain configuration steps to update your MX record for your domain, so that your inbound email flows through EOP. For more information, you can again reference Create DNS records for Office 365.
Use the Remote Connectivity Analyzer to run a test that verifies your MX record. For more information, see the “Use the Remote Connectivity Analyzer to test your MX record and Outbound connector” section in Test Mail Flow with the Remote Connectivity Analyzer.
At this point, you’ve verified service delivery for a properly configured Outbound on-premises connector, and you’ve verified that your MX record is pointing to EOP. You can now choose to run the following additional tests to verify that an email will be successfully delivered by the service to your on-premises environment:
In the Remote Connectivity Analyzer, click the Office 365 tab, and then run the Inbound SMTP Email test located under Internet Email Tests.
Send an email message from any web-based email account to a mail recipient in your organization whose domain matches the domain you added to the service. Confirm delivery of the message to the on-premises mailbox using Microsoft Outlook or another email client.
If you want to run an outbound email test, you can send an email message from a user in your organization to a web-based email account and confirm that the message is received.
When you’ve completed your setup, you don’t have to perform extra steps to make EOP remove spam and malware. EOP removes spam and malware automatically. However, you can fine tune your settings in the EAC, based on your business requirements. For more information, see Anti-Spam and Anti-Malware Protection.|
Now that your service is running, we recommend reading Best Practices for Configuring EOP, which describes recommended settings and considerations for after you set up EOP.