How to Set Up a Catch-All Mailbox in Microsoft 365 (Exchange Online) – IT Solver Support

This guide provides step-by-step instructions on how to configure a "catch-all" mailbox in Microsoft 365. A catch-all mailbox receives all emails sent to non-existent addresses at your domain, preventing them from bouncing back to the sender.

Overview

Microsoft 365 does not have a simple "catch-all" checkbox. The correct configuration requires a specific three-part setup to work reliably. First, we will change the domain type to allow Exchange to accept emails for non-existent users. Second, we will create a dynamic group of all valid recipients to use as an exception. Finally, we will create a mail flow rule that redirects emails for any address not in that group to our designated catch-all mailbox.

Prerequisites

Administrator access to the Microsoft 365 Admin Center and Exchange Admin Center.
A dedicated mailbox to receive the catch-all emails. A Shared Mailbox is recommended as it does not require a license (e.g., catch-all@yourdomain.com).

How to Configure the Catch-All Mailbox

Step 1: Set Your Domain Type to 'Internal Relay'

This is the most critical step. It stops Exchange from immediately rejecting emails sent to unknown addresses, allowing our mail flow rule to process them instead.
1. Navigate to the Exchange Admin Center (EAC).
2. Go to Mail flow Accepted domains.
3. Click on the domain you wish to configure (e.g., itsolver.net).
4. In the details pane that opens, select the Internal relay option.
5. Click Save. Repeat this for all domains needing a catch-all.
If this step is skipped, the mail flow rule will fail, and senders will receive a "550 5.4.1 Recipient address rejected" bounce-back error.
Step 2: Create a Dynamic Distribution Group for All Valid Recipients

This group will automatically contain all valid mailboxes, ensuring that legitimate emails are not redirected. This is better than manually listing exceptions because it updates automatically as you add or remove users.
1. In the EAC, go to Recipients Groups.
2. Click Add a group and select Dynamic distribution.
3. Name: Give it a descriptive name, like All Valid Recipients.
4. Users (Assign members): Select the option for All recipient types. Do not add any further rules or conditions.
5. Settings: Assign an email address for the group, like all-valid-recipients@yourdomain.com.
6. Complete the wizard to create the group.
Step 3: Create the Mail Flow Rule

This rule ties everything together. It identifies emails sent to non-existent users and redirects them to your catch-all mailbox.
1. In the EAC, go to Mail flow Rules.
2. Click + Add a rule and then Create a new rule.
3. Configure the rule as follows:
  - Name: Server-Side Catch-All Rule
  - Apply this rule if...
    - The sender is located Outside the organization
    - AND
    - The recipient's domain is... (Add all your domains that need the catch-all).
  - Do the following...
    - Redirect the message to... Select your catch-all mailbox (e.g., catch-all@yourdomain.com).
  - Except if...
    - The recipient... is a member of this group Select the All Valid Recipients group you created in Step 2.
4. Set the Priority to a high number (e.g., 10) to ensure it runs after other rules.
5. Click Next and then Finish to save the rule. Ensure it is enabled.
Step 4: Wait and Test

Changes in Exchange Online, especially to accepted domains and mail flow rules, can take time to propagate across all servers.
1. Wait for 30-90 minutes.
2. From an external email account (like a personal Gmail or Outlook account), send a test email to a completely random, non-existent address at your domain (e.g., random-test-xyz123@yourdomain.com).
3. Check the designated catch-all mailbox. The test email should arrive there.

Additional Information

Increased Spam: Be aware that catch-all mailboxes are magnets for spam, as they validate any address at your domain for spammers. Ensure your spam filtering is robust.
Mailbox Size: Monitor the size of the catch-all mailbox regularly, as it can grow very quickly.
Propagation Time: Patience is key. If testing fails, wait a bit longer before troubleshooting, as the changes may not have fully taken effect yet.

Troubleshooting Tips

If emails are still bouncing, double-check that all relevant domains are set to Internal Relay in the "Accepted domains" section. This is the most common point of failure.
If emails are not being redirected, use the Message Trace tool in the Exchange Admin Center. It allows you to track an email and see exactly what happened to it, including which rules were (or were not) applied.

Was this helpful?

If you've followed this guide, we'd love to hear about your experience. Please leave a comment below to share whether this guide helped you achieve your goal. If you found an alternative approach that worked, we encourage you to share that as well. Your feedback helps us improve our documentation and assists others in the community.

Need Further Assistance?

If you need additional support or would like personalized guidance, we're here to help. Check out our dedicated support plans at IT Solver Support Plans for expert assistance tailored to your needs.