Key takeaways
- Redundancy keeps the service up; it is not a backup of your data
- Recycle bins and retention have limits and were not built for restores
- Back up Exchange, OneDrive, SharePoint and Teams
- Test restoring a mailbox and a site, not just the backup job
What built-in features cover
Built-in features help with
- Recently deleted emails and files, for a limited time
- Earlier versions of a OneDrive or SharePoint file
- Retention policies and holds for compliance
They fall short on
- Point-in-time restore of a whole mailbox or site
- Data deleted longer ago than the retention window
- Accounts removed after an employee leaves
- Restores at scale after ransomware or a rogue admin
What to back up
- Exchange Online mailboxes, including shared mailboxes, calendars and contacts
- OneDrive for every user, including people who have left
- SharePoint sites and document libraries
- Teams channel files and conversations
- Configuration and settings, where your backup tool supports it
Choosing a Microsoft 365 backup
- Copies kept outside your tenant, or protected so a compromised admin cannot delete them
- Granular restore of a single email, file or folder as well as whole mailboxes and sites
- Retention set to your business and compliance needs
- Automatic protection for new users and new sites
- Reports on failed, incomplete and successful backups
Microsoft now sells its own Microsoft 365 Backup service alongside third-party options, each with different restore speeds, retention and storage locations. The right fit depends on how much data you hold and how quickly you would need it back.
How we help
Microsoft 365 administration comes with every supported user, including offboarding, so data is handed over before an account is removed. When you ask for a quote, tell us about your Microsoft 365 data and we will include it in your backup and disaster recovery plan, alongside the local and offsite backup strategy, monitoring and restore testing.
Sources
- Microsoft Learn: Microsoft 365 Backup overview
- Microsoft Learn: Learn about retention policies and labels
- CISA: #StopRansomware Guide
Information on this page is general and is not legal or compliance advice.