Domain transfer and registrar access
Overview
Domains are high-value assets; losing registrar MFA strands everyone. Treat like crown jewels.
Access model
Client-owned shared mailbox + hardware FIDO in exec safe recommended; MSP is delegate, not owner, where possible.
Transfer prep
Unlock domain, obtain auth code, disable WHOIS privacy briefly if interferes, verify 60-day ICANN lock rules.
Email during transfer
Lower TTL; stage Microsoft 365 / Google DNS copies; beware auto-renew gaps.
Brand protection
Confirm DNSSEC key rollovers paused during volatile windows if registrar cannot coordinate.
Post-transfer
Re-enable privacy, audit contacts for stale MSP emails, update billing card to client treasury.
Documentation
Screenshot success confirmation; store auth codes encrypted only—never plain email.
Note
Not legal advice; cc corporate counsel for M&A carve-outs.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...