Commands › Exchange Online

Disable-DnssecForVerifiedDomain

Exchange Online ExchangeOnlineManagement Disable-*

Disable Domain Name System Security (DNSSEC) for inbound mail to accepted domains in Exchange Online.

Quick start script

# Disable-DnssecForVerifiedDomain — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-DnssecForVerifiedDomain
$before | Format-List

# 3. Make the change (dry run first)
Disable-DnssecForVerifiedDomain -DomainName <String> -WhatIf
Disable-DnssecForVerifiedDomain -DomainName <String>

# 4. Verify and diff
$after = Get-DnssecForVerifiedDomain
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Disable-DnssecForVerifiedDomain [-DomainName] <String>
 [-Confirm]
 [-WhatIf]
 [<CommonParameters>]

Parameters (3)

Parameter	Type	Required	What it controls
-DomainName	String	yes	The DomainName parameter specifies the accepted domain in the Exchange Online organization where you want to disable DNSSEC (for example, contoso.com). Use the Get-DnssecForVerifiedDomain cmdlet to see information...
-Confirm	SwitchParameter		This parameter is reserved for internal Microsoft use.
-WhatIf	SwitchParameter		This parameter is reserved for internal Microsoft use.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.