SETUP
Workspace or Microsoft 365, configured properly
Domain verification, mailboxes, aliases, groups and shared mailboxes, plus client setup across desktop and mobile. Done once, documented, and handed over.
MX 1 smtp.google.com
GOOGLE WORKSPACE · MICROSOFT 365 · DNS · SPF/DKIM/DMARC
Business email, set up properly —
and migrated without losing mail.
Google Workspace and Microsoft 365 setup, provider migrations, DNS cleanup, and the authentication layer underneath — configured once and verified against live mail.
Fixed quote before I start. Your mail keeps flowing during the move.
Show original — mx.google.com
spfSOFTFAILsender not authorised
dkimNONEmessage not signed
dmarcFAILp=none, no policy
Every job ends with this checked against live mail.
WHAT CHANGED
What changed in email authentication
Feb 2024
Google and Yahoo began requiring SPF, DKIM and DMARC from bulk senders.
May 2025
Microsoft applied the same requirements to Outlook and Hotmail.
5,000/day
The bulk-sender threshold where those rules are enforced most strictly.
Mail that fails these checks is throttled, junked, or rejected outright. There is no warning email when it starts.
WHAT I DO
Email infrastructure, end to end
MIGRATION
Move providers without losing mail
Mailboxes, calendars and contacts moved across, a staged MX cutover outside your working hours, and verification that nothing was left behind. The old provider stays reachable throughout.
IMAP sync → 12,480 items → 0 errors
DNS & AUTH
The records underneath, cleaned up
Stale records removed, SPF kept under the ten-lookup limit, DKIM signed and switched on, DMARC staged to enforcement — then verified against real message headers.
_dmarc TXT v=DMARC1; p=reject; rua=mailto:...
Most email problems trace back to DNS that was set up once, years ago, by someone who has since left.
START HERE
I'll check your domain before you pay anything
DNS is public. I can see how your mail is routed and what is wrong with it without any access to your accounts, and I'll tell you what I find whether or not you hire me. It takes about ten minutes.
- Where your mail currently routes, and whether the MX records agree with it
- Every authentication record you publish, and what each one is actually doing
- Stale, duplicate and conflicting DNS entries left behind by previous setups
- Whether your domain or sending IP appears on any major blacklist
- What a migration would involve, if you are considering one, and what it would cost
PRICING
Fixed prices for project work.
Setup and migrations are quoted before work starts. Ongoing support is hourly, with no retainer and no minimum.
Setup
$350
A new Google Workspace or Microsoft 365 tenant, configured and documented.
- Domain verification and MX configuration
- Up to 10 mailboxes, aliases, groups and shared mailboxes
- SPF, DKIM and DMARC configured from the start
- Desktop and mobile client setup for your team
- Written handover documentation
MOST COMMON
Migration
From $600
Moving between providers, with mail flowing the whole way through.
- Mailboxes, calendars and contacts migrated across
- Staged MX cutover outside your working hours
- Old provider kept available as a fallback until verified
- Item counts reconciled so nothing is left behind
- Authentication rebuilt and verified on the new provider
Ongoing support
$45/hour
Admin, troubleshooting and changes as the business grows.
- Mailbox and licence changes as staff join or leave
- Deliverability investigation when something starts failing
- DNS and authentication kept correct as tools change
- Blacklist monitoring and delisting requests
- No retainer, no minimum hours
Payment through Upwork or direct invoice. Project work quoted before it starts.
HOW IT RUNS
How it runs
- 01
Audit
I check where your mail routes now, what DNS you are publishing, and what is already broken. You get the findings whether or not you hire me.
- 02
Scope and quote
What is being set up or moved, when the cutover happens, and what it costs. Project work is never billed hourly.
- 03
Execute
Setup or migration runs with mail flowing throughout. The cutover is staged, and your old provider stays available as a fallback until the new one is verified.
- 04
Verify and hand over
Authentication checked against live message headers, every record documented, and admin access handed back to you.
Nothing here requires a call. If you'd prefer one, that's fine too.
WHAT YOU GET
Documentation, not just a message saying it is done
- Every record published, what it does, and where it lives
- Mail routing before and after, so the change is auditable
- Authentication verified against real message headers
- Admin accounts and licences, and who holds what
- Your DMARC enforcement schedule with real dates
- What to check first if something changes later
Four to six pages, yours to keep — enough for another administrator to pick up where I left off.
QUESTIONS
The things people ask before hiring me
No. Mail is copied across first, not moved — your old mailboxes stay intact and reachable the entire time. The MX cutover happens at the end, usually outside working hours, and anything delivered during the switch is picked up in a final sync. If something looked wrong mid-move, the old provider is still there to fall back to.
For a DNS or authentication fix, no — those records are public and I can diagnose them without touching anything you own. For setup and migration work, yes: I need admin on the tenant and access to your DNS. That access is scoped to the job, documented, and you revoke it the moment the work is signed off.
A single mailbox is usually same-day. Ten to twenty mailboxes typically run across two to three days, most of which is unattended syncing rather than anything you need to sit through. The part that actually affects your team — the cutover — is under an hour.
It depends on what your team already lives in. If that is Excel, Teams and Office documents, Microsoft 365 is the lower-friction choice. If it is Docs, Drive and Meet, Workspace is. I will give you a straight recommendation for your situation rather than a preference, and set up whichever you choose.
It comes with you. Mail, folder structure, calendars and contacts are migrated across. Archives can either be brought into the new tenant or exported to file if you would rather keep them outside it. Nothing is deleted from your old provider by me.
Yes, hourly, with no retainer. Most clients need a few hours in the first month and very little after that. You get full documentation of the setup either way, so another administrator could pick it up without me.
FREE AUDIT
Send me a domain. I'll tell you what's wrong with it.
No cost and no obligation. You'll get the findings whether or not you decide to hire me — worst case you learn something about your own setup.
Reply within a few hours, Mon–Sat, usually within a few hours (aligned to US & Canada business hours)
adil@aurovaglobal.com