Topics Map > Security
Topics Map > Microsoft 365 > Email

Email Authenticity (DMARC) at UWM

Achieving email authenticity is part of an ongoing project by University IT Services to protect users from spam, phishing, and improve the reputation of email sent from UWM.

University email administrators have deployed the Domain-based Message Authentication, Reporting & Conformance (DMARC) framework to provide email services with stronger control to prevent illegitimate use of UWM email addresses and ensure message delivery to recipients. 

We frequently use the term email authenticity in place of DMARC because it is more descriptive of what we are evaluating when we receive an email message. 


How DMARC Works

  • DMARC provides protection against spam and phishing emails and other spoofing attempts by verifying the authenticity of any sender attempting to use the @uwm.edu domain or sub domains.
  • When unauthenticated messages are detected, DMARC provides instructions on how to handle unauthorized email, such as delivering messages to junk, quarantining, or rejecting the messages.
  • DMARC identifies legitimate senders, either emails sent by UWM Microsoft 365 users or by approved/verified email services and delivers them successfully.

Please see our DMARC Information for a technical, deep dive. 


How will DMARC implementation affect you?  

Most email users will notice no change in service. If you are a service owner of an on-campus or cloud-based service that sends email, University IT Services staff will engage with you on this project. 

If you have procured a new third-party service that sends email, you can also submit the Email Service Configuration request form and IT staff will contact you. 


Examples of Approved/Verified Services vs. Unapproved/Unverified Services 

Approved, Verified, and Configured Unapproved, Unverified, and Not Configured 
Microsoft 365 Services Non-UWM email accounts that send as a uwm.edu address
pantherLIST Third-party email services that are not configured to work with DMARC controls
Emma Third-party email scripts/servers that don’t send email using on-campus mail services
Qualtrics
SMTP Relay
Other third-party services that are configured to work with DMARC and send using a subdomain
 
 


Keywords:
O365, M365, Microsoft 365, outlook, email authenticity, email authentication, email service configuration, dmarc, dkim, spf, vendor, third party vendor, message not received, email message not received, from header, email reputation, request to bypass spam scanning, microsoft 
Doc ID:
122087
Owned by:
Help Desk K. in UW-Milwaukee Help Desk
Created:
2022-10-24
Updated:
2025-10-24
Sites:
UW-Milwaukee Help Desk