365 , move domain to another tennant

Forums › IT Pro and developers › 365 , move domain to another tennant

1101

3120 posts

Uber Geek

#279734 4-Nov-2020 12:06

365

I need to move a domain to a new tennant
I dont have access to the current tennent , but can arrange to have them remove it .

Assuming no email or onedrive files etc need to be moved (no files, email a/cs that havnt been used )
Do I just get the existing Tennant admin to delete the domain ? Is that all there is to it ? or are there powershell scripts to run to clean it out completely ?

All the clear instructions Ive found are to do with migration (of data) , not a simple move of domain .

1 | 2

3812 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2597566 4-Nov-2020 12:10

I've only done this once, years ago. Yes just delete the domain from the old tenancy, so it can be added to a new tenancy.

My situation was a hostile one for a client... court case was won, domain handed over, but the other party wouldn't delete the domain from their tenancy. In the end we just had to host the email elsewhere.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

AliExpress

Shop now on AliExpress (affiliate link).

1101

3120 posts

Uber Geek

#2597591 4-Nov-2020 13:16

The person who added this band new domain to their tenant, doesnt actually want that domain in their tenant .

Because its new , I hoping theres nothing in the email that needs saving (shouldnt be)

networkn

Networkn
32131 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2597612 4-Nov-2020 13:51

We had to do this recently and despite there being documentation for it, it didn't work and MS had to be involved and manually moved it across after about 9 days of interacting and saying the same thing over and over and over and providing the required information about 4 times. It was exceptionally frustrating. I absoloutely dread having to use MS Support for MS365.

1101

3120 posts

Uber Geek

#2597671 4-Nov-2020 14:39

on a related topic :-)

For an unrelated 365 a/c
how do I find out who is the admin (or 365 'partner') for a 365 Business a/c (the 365 partner might be Ingram )
and who is admin for a cloudflare a/c (In case I need dns records changed , nameservers are with cloudflare)

owner has none of this info , and no admin logins etc , doesnt actually know who is providing what service .

Dynamic

3812 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2597675 4-Nov-2020 14:43

Find out who sends the invoices for these services, and ask them...?

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

CYaBro

4522 posts

Uber Geek

ID Verified

Trusted

#2597687 4-Nov-2020 14:59

Even if you can't get access to the tenant that a domain is already verified in you can do a takeover using DNS to transfer that domain to another tenant.

Opinions are my own and not the views of my employer.

Dynamic

3812 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2597688 4-Nov-2020 15:05

CYaBro:

Even if you can't get access to the tenant that a domain is already verified in you can do a takeover using DNS to transfer that domain to another tenant.

How sure are you about this? The last time I tried, admittedly around 2 years ago, you could not have the same domain in 2 tenancies. 365 flatly refused to allow the domain to be added to the second tenancy.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

1101

3120 posts

Uber Geek

#2597700 4-Nov-2020 15:35

Dynamic:

Find out who sends the invoices for these services, and ask them...?

if only it was that simple.
Thats the first thing I asked. They still had no idea .
I did see a monthly inv from Ingram, thats a start .

Their previous IT support now refuse to talk to them, never a good sign .

Strangely , the autodiscover dns record (for 365 outlook setup ) didnt work(ie no record found) onsite , but seems to work here .
Thats what started the need to try & unravell who is admin for what & get some admin logins .

Dynamic

3812 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2597721 4-Nov-2020 16:06

Hmmm... odd.

Perhaps log a support ticket through the tenancy asking who the Partner Relationships are for that tenancy? Hopefully the support people can supply this without any privacy concerns.

You don't need to transfer CSP licenses. If you have admin access to the tenancy, just add yourself as a partner (with the client's permission) and add your licenses as usual, and advise the old IT company to cancel theirs.

Cloudflare... might have to log a support ticket and ask them.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

networkn

Networkn
32131 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2597724 4-Nov-2020 16:10

We had a similar issue, we ended up calling distis till one of them found it and worked from there.

MS make this SO much harder than it should be in my opinion.

I get how important it is that tenancies aren't hijacked, but still. Surely there has to be a better way.

CYaBro

4522 posts

Uber Geek

ID Verified

Trusted

#2597725 4-Nov-2020 16:11

Dynamic:

CYaBro:

Even if you can't get access to the tenant that a domain is already verified in you can do a takeover using DNS to transfer that domain to another tenant.

How sure are you about this? The last time I tried, admittedly around 2 years ago, you could not have the same domain in 2 tenancies. 365 flatly refused to allow the domain to be added to the second tenancy.

Never had to do it myself but I think what actually happens is you need to contact Microsoft support and get them to elevate one of the users to global admin.

To do that they give you a DNS record to create, to proove ownership of the domain, and once they verify that they change a user to global admin for you.

Opinions are my own and not the views of my employer.

Dynamic

3812 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2597729 4-Nov-2020 16:18

I think we might be talking about 2 different things.... I get the impression you are talking about reclaiming lost admin access to a tenancy (only had to do this once - seriously dodgy IT company), where I was talking about moving a domain to a new tenancy, and having to remove it from the old tenancy first.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

Jogre

182 posts

Master Geek

#2601907 11-Nov-2020 15:45

Couple of things;

- you can't add a domain to 2 tenants, the auth code will change every time you go to verify your TXT record from experience.

- You can do an internal admin takeover if you don't have access to the admin accounts but own the access to DNS. Basically go to PowerBI and sign up for a trial with an account from within the tenant. Can google Internal M365 Admin Takeover and you should get pointed in the right direction for the process. If you don't have access to DNS to add a TXT record then you're in a bit of a pickle.

cyril7

9049 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2601989 11-Nov-2020 17:55

1101:

...Snip...

if only it was that simple.
Thats the first thing I asked. They still had no idea .
I did see a monthly inv from Ingram, thats a start .

Their previous IT support now refuse to talk to them, never a good sign .

Strangely , the autodiscover dns record (for 365 outlook setup ) didnt work(ie no record found) onsite , but seems to work here .
Thats what started the need to try & unravell who is admin for what & get some admin logins .

If it work offsite but not onsite, is it possible the in house domain is the same as the public domain and there is no internal cname to point to the public autodiscover

Cyril

Jogre

182 posts

Master Geek

#2602451 12-Nov-2020 10:26

1101:

Dynamic:

Find out who sends the invoices for these services, and ask them...?

if only it was that simple.
Thats the first thing I asked. They still had no idea .
I did see a monthly inv from Ingram, thats a start .

Their previous IT support now refuse to talk to them, never a good sign .

Strangely , the autodiscover dns record (for 365 outlook setup ) didnt work(ie no record found) onsite , but seems to work here .
Thats what started the need to try & unravell who is admin for what & get some admin logins .

Ingram will likely have delegated global admin as the CSP provider so could help but may be unlikely to depending on their policies. Also possible that previous IT prevented Global Admin rights for Ingram but depends on how the Customer has been added in CloudBlue.

1 | 2