In this article
Microsoft 365 is the working foundation of most companies in Portugal, and that is precisely why it concentrates the most expensive mistakes. Almost all of them fall into three categories: too many licences, security left unconfigured and the belief that Microsoft backs up the data. Well-managed Microsoft 365 solves all three with simple routines and a named person responsible.
The four points to remember
- Backup Microsoft 365 does not back up your data in the way most people assume; responsibility for the data lies with the customer.
- Licences Most companies overpay, through oversized plans and accounts belonging to people who have left.
- Two-step authentication The single measure that most reduces risk, and still switched off in many subscriptions.
- Migration Moving email is easy; moving files and habits is what takes the work.
Backup: the most dangerous misunderstanding
Microsoft guarantees service availability: the platform works and does not lose data because of a failure in its own infrastructure. That is different from protecting your data against the company's own mistakes.
Three scenarios show the difference:
- Silent deletion Someone deletes a shared folder and nobody notices for months.
- Compromised account An attacker gets in and deletes content.
- Ransomware Synchronised files are encrypted.
In all three, the native retention mechanisms have limited timeframes. Once that period has passed, the content does not come back. Anyone who relies on Microsoft 365 for email and documents needs a dedicated backup with tested restores and retention set by the company — a small cost compared with what it protects.
Licences: paying for what each person uses
The usual mistake is giving everyone the same plan. Someone who spends the day in spreadsheets and presentations does not need the same as someone who only uses email and a file space. Before renewing, ask three questions per user:
- Do they need the installed apps, or is the browser version enough?
- Do they need more storage than the base plan provides?
- Do they need advanced security and compliance features?
An honest review finds, in most companies, several licences that can move down a tier and others that should no longer exist.
Former employees' accounts are the most common waste and the easiest to eliminate. The account of someone who left a year ago is billed every month and remains a way in. A quarterly review solves both problems.
DataRoad IT Unlimited
Talk to DataRoad. We assess your operation and propose the right plan.
The minimum security configuration
These measures should be active in any business subscription — and often they are not:
- Two-step for everyone Including management, the favourite target.
- Legacy protocols blocked They allow the second factor to be bypassed.
- Forwarding alerts A rule sending all email outside is the typical first step for anyone who compromises an account.
- External sharing reviewed Links open to anyone, created years ago and forgotten.
- Audit log switched on After an incident, it is the only way to reconstruct what happened.
Migrating files without creating years of confusion
Email migration is predictable today. It is files that tend to go wrong, and almost never for technical reasons. The hard part is deciding where each thing lives: personal working documents, team documents and company documents belong in different places. An important document saved in someone's personal space leaves the company with that person.
Before moving the first file, set three rules:
- Team spaces What belongs to a team lives in team spaces.
- Permissions by group Never person by person.
- Simplify Structures inherited from an old server are simplified during migration, not copied.
And allow time for adjustment: the technology changes over a weekend; habits take weeks.
The routines of managed Microsoft 365
Microsoft 365 changes frequently, and an unmaintained subscription degrades without warning. Four routines keep it in order:
| Routine | Frequency |
|---|---|
| Review of licences and active accounts | Quarterly |
| Check of external sharing | Periodic |
| Real backup restore test | At least once a year |
| Access review | Whenever someone joins or leaves |
None of them requires deep expertise. They require someone to be assigned responsibility — and that is usually where they fall down.
Hand Microsoft 365 to people who manage it every day
DataRoad - IT Services and Consulting implements and manages Microsoft 365 and cloud for businesses — migration, security configuration and dedicated backup — as part of its managed IT services.
More than 10 workstations · support contract · remote, on-site and telephone support. Request a no-obligation proposal.
