Why Most M365 Migrations in Dubai Go Wrong
The biggest mistake: importing email and calling the migration done. A proper Microsoft 365 setup involves 4 areas — licence selection, email migration, security hardening, and ongoing management. Most Dubai SMEs only complete the first two.
Phase 1: Choose the Right Licence
| Plan | Cost per User/Month (AED) | Who Needs It |
|---|---|---|
| Business Basic | 55 | Web-only users, no Office apps |
| Business Standard | 105 | General staff needing Office desktop apps |
| Business Premium | 185 | IT admins, finance, HR — need Intune + Defender |
Tip: Mix licences. Most staff → Business Standard. IT admin, finance, senior management → Business Premium. Do not put everyone on Premium.
Phase 2: Email Migration (Cutover vs Staged)
Cutover migration (under 150 mailboxes, recommended for most Dubai SMEs):
1. Add and verify your domain in Microsoft 365 Admin Centre
2. Create all user accounts and assign licences
3. Set up Exchange Online connectors
4. Run the Migration Wizard — all mailboxes migrate in 1 to 3 days
5. Update MX record to point to Microsoft 365
6. Verify email is flowing
7. Remove old email system
Staged migration (150+ mailboxes or complex on-premise Exchange):
Migrate in batches by department over several weeks. Requires Exchange hybrid configuration.
Phase 3: Security Hardening (Most Companies Skip This)
After migration, immediately configure:
Enable MFA for all users:
M365 Admin > Users > Multi-Factor Authentication. Enable for all users. This single step prevents 99.9% of account compromises.
Set email authentication records:
- SPF: Add to DNS (TXT record provided by Microsoft)
- DKIM: Enable in M365 Security Centre, add CNAME records to DNS
- DMARC: Add TXT record: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
Configure anti-phishing policy:
Enable impersonation protection for your CEO and finance directors. Enable mailbox intelligence.
Block legacy authentication:
Old protocols (POP3, IMAP, basic auth) bypass MFA. Disable them in Conditional Access.
Phase 4: Set Up Third-Party Backup
Microsoft does NOT back up your email data. Their retention policies protect against accidental deletion for 30 days — not against bulk deletion, corruption, or extended data loss.
Add: Veeam Backup for M365, Acronis, or Spanning. Cost: AED 15 to 30 per user per month.
Common Migration Mistakes
| Mistake | Fix |
|---|---|
| Not setting up SPF/DKIM/DMARC | Emails land in spam; domain spoofable |
| Skipping MFA | First account compromise is only a matter of time |
| No backup solution | Next accidental bulk delete has no recovery |
| Not revoking access for leavers | Ex-employee can still access email for months |
SAS IT manages Microsoft 365 migrations for Dubai SMEs. Get migration help | +971-526716178
*Related: Managed IT Services Dubai | Server Solutions Dubai*
Tags
SAS IT Services — Dubai
Need expert IT support?
Our certified engineers cover all of Dubai & UAE with same-day response and 24/7 support contracts.