DKIM Email Signing Ingeschakeld

<# .SYNOPSIS DKIM Signing Configuration .DESCRIPTION Ensures DKIM (DomainKeys Identified Mail) is enabled for all domains. DKIM prevents email spoofing and improves deliverability. .NOTES Filename: dkim-enable.ps1 Author: Nederlandse Baseline voor Veilige Cloud .EXAMPLE .\dkim-enable.ps1 -Monitoring Check DKIM status for all domains .EXAMPLE .\dkim-enable.ps1 -Remediation Enable DKIM for all domains #> #Requires -Version 5.1 #Requires -Modules ExchangeOnlineManagement [CmdletBinding()] param( [Parameter(Mandatory = $false)] [switch]$Monitoring, [Parameter(Mandatory = $false)] [switch]$Remediation, [Parameter(Mandatory = $false)] [switch]$Revert, [switch]$WhatIf ) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "DKIM Signing Configuration" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop Write-Host "Checking DKIM configuration for all domains..." -ForegroundColor Gray $configs = Get-DkimSigningConfig -ErrorAction Stop $result = @{ isCompliant = $true total = $configs.Count enabled = 0 disabled = 0 disabledDomains = @() } foreach ($config in $configs) { if ($config.Enabled) { $result.enabled++ Write-Host " [OK] ENABLED: $($config.Domain)" -ForegroundColor Green } else { $result.disabled++ $result.isCompliant = $false $result.disabledDomains += $config.Domain Write-Host " [FAIL] DISABLED: $($config.Domain)" -ForegroundColor Red } } Write-Host "`n Total domains: $($result.total)" -ForegroundColor Cyan Write-Host " DKIM Enabled: $($result.enabled)" -ForegroundColor Green Write-Host " DKIM Disabled: $($result.disabled)" -ForegroundColor $( if ($result.disabled -gt 0) { "Red" } else { "Green" } ) if ($result.isCompliant) { Write-Host "`n[OK] COMPLIANT - DKIM enabled for all domains" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - DKIM not enabled for all domains" -ForegroundColor Red Write-Host "`nNote: You must publish CNAME records in DNS before enabling DKIM" -ForegroundColor Yellow exit 1 } } catch { Write-Host "`n[FAIL] ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Remediation { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop Write-Host "Getting disabled DKIM configurations..." -ForegroundColor Gray $configs = Get-DkimSigningConfig | Where-Object { -not $_.Enabled } if ($configs.Count -eq 0) { Write-Host " [OK] All DKIM configs already enabled" -ForegroundColor Green exit 0 } Write-Host "`nEnabling DKIM for $($configs.Count) domains...`n" -ForegroundColor Cyan $enabled = 0 $failed = 0 foreach ($config in $configs) { try { Write-Host " Enabling DKIM for $($config.Domain)..." -ForegroundColor Gray # First, ensure DNS records are published Write-Host " Checking DNS records..." -ForegroundColor Gray Set-DkimSigningConfig -Identity $config.Domain -Enabled $true -ErrorAction Stop Write-Host " [OK] Enabled" -ForegroundColor Green $enabled++ } catch { Write-Host " [FAIL] Failed: $_" -ForegroundColor Red Write-Host " Check DNS CNAME records are published!" -ForegroundColor Yellow $failed++ } } Write-Host "`n Enabled: $enabled" -ForegroundColor Green if ($failed -gt 0) { Write-Host " Failed: $failed" -ForegroundColor Red Write-Host "`n⚠️ Failures likely due to missing DNS records" -ForegroundColor Yellow Write-Host "Publish CNAME records shown in Microsoft 365 Admin Center" -ForegroundColor Cyan } if ($enabled -gt 0) { Write-Host "`n[OK] DKIM enabled for $enabled domains" -ForegroundColor Green } exit 0 } catch { Write-Host "`n[FAIL] ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Revert { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop $configs = Get-DkimSigningConfig | Where-Object { $_.Enabled } foreach ($config in $configs) { Set-DkimSigningConfig -Identity $config.Domain -Enabled $false -ErrorAction Stop Write-Host " ⚠️ Disabled: $($config.Domain)" -ForegroundColor Yellow } exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Revert) { Invoke-Revert } elseif ($Monitoring) { Invoke-Monitoring } elseif ($Remediation) { Invoke-Remediation } else { Write-Host "Usage:" -ForegroundColor Yellow Write-Host " -Monitoring Check DKIM status" -ForegroundColor Gray Write-Host " -Remediation Enable DKIM (requires DNS records!)" -ForegroundColor Gray Write-Host " -Revert Disable DKIM" -ForegroundColor Gray } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan }