Deliverability · Practical guide
Microsoft SNDS limitations: check IP ownership and data scope
Establish whether you can access the relevant outbound infrastructure data before relying on SNDS for a hosted mailbox diagnosis.
Reviewed · Examples are illustrative
Who this helps: Operators diagnosing authentication, receiving-policy and delivery failures.
Define the decision
SNDS is an infrastructure-oriented diagnostic surface. A mailbox user may not control or have access to the provider’s outbound IP data. Microsoft has also moved the service entry point, so old navigation screenshots may no longer match.
Work through the procedure
- Identify the actual outbound IP from a failed or received message.
- Determine which provider controls that infrastructure.
- Use Microsoft’s current SNDS entry point and its access process where applicable.
- If access belongs to the provider, submit a focused evidence package instead of guessing an IP reputation result.
Worked example
The following is a synthetic example for this procedure, not a customer result or performance benchmark.
User controls: mailbox credentials and domain DNS
Provider controls: outbound IP pool
Available evidence: receiving error and specific sending IP
Escalation: ask the provider to inspect its infrastructure data for that intervalRead the result
The useful limitation is clear ownership. A lack of SNDS access is not proof of good or bad reputation, and a result for one IP may not describe the entire provider pool.
Check before moving on
- Confirm the observed IP rather than using the MX address.
- Keep provider and campaign timestamps aligned.
Limits and next action
This guide does not promise an SNDS integration inside Zintara. Treat external infrastructure diagnostics as additional evidence, with coverage determined by Microsoft and the infrastructure owner.
Source references
Worked examples are illustrative. Editorial procedures are suggested methods, not measured performance claims or promises of additional product features.
Related guides
- Connect Microsoft 365 to Zintara with a complete send-and-reply test →
- Microsoft SMTP AUTH disabled: inspect the effective mailbox policy →
- Microsoft IMAP access disabled: diagnose the receiving protocol →