Microsoft Forms automated email sender domain is changing

🚨 The Signal: Microsoft Forms automated email sender domain is changing from maccount@microsoft.com to no-reply@forms.mail.microsoft. This requires review of existing mail flow rules to prevent disruption and ensure continued delivery of legitimate Forms notifications.

The Impact

Organizations with mail flow rules referencing the old sender address are affected, risking non-delivery of Forms notifications.

• Security teams: Risk of legitimate Forms notifications being blocked by existing mail flow rules.
• Admins: Need to update mail flow rules to ensure Forms notifications are delivered.
• End users: May not receive Forms response receipts or new response notifications.
• Compliance teams: Potential for missed notifications impacting audit trails or data handling processes.

The Action

1. Identify all Exchange Online mail flow rules, mailbox rules, or filtering policies referencing 'maccount@microsoft.com'.
2. Update identified rules to include or replace 'maccount@microsoft.com' with 'no-reply@forms.mail.microsoft'.
3. For GCC/GCC High/DoD, review and configure notification email options in Microsoft Forms if desired.
4. Test mail flow to ensure Forms automated emails are delivered correctly after the change.

Domain: Exchange · Impact: medium · Workload: Exchange Online