SAS ITWhy Most M365 Migrations in Dubai Go Wrong
The biggest mistake: importing email and calling the migration done. A proper Microsoft 365 setup involves 4 areas — licence selection, email migration, security hardening, and ongoing management. Most Dubai SMEs only complete the first two.
Phase 1: Choose the Right Licence
| Plan | Cost per User/Month (AED) | Who Needs It |
|---|---|---|
| Business Basic | 55 | Web-only users, no Office apps |
| Business Standard | 105 | General staff needing Office desktop apps |
| Business Premium | 185 | IT admins, finance, HR — need Intune + Defender |
Tip: Mix licences. Most staff → Business Standard. IT admin, finance, senior management → Business Premium. Do not put everyone on Premium.
Phase 2: Email Migration (Cutover vs Staged)
Cutover migration (under 150 mailboxes, recommended for most Dubai SMEs):
1. Add and verify your domain in Microsoft 365 Admin Centre
2. Create all user accounts and assign licences
3. Set up Exchange Online connectors
4. Run the Migration Wizard — all mailboxes migrate in 1 to 3 days
5. Update MX record to point to Microsoft 365
6. Verify email is flowing
7. Remove old email system
Staged migration (150+ mailboxes or complex on-premise Exchange):
Migrate in batches by department over several weeks. Requires Exchange hybrid configuration.
Phase 3: Security Hardening (Most Companies Skip This)
After migration, immediately configure:
Enable MFA for all users:
M365 Admin > Users > Multi-Factor Authentication. Enable for all users. This single step prevents 99.9% of account compromises.
Set email authentication records:
- SPF: Add to DNS (TXT record provided by Microsoft)
- DKIM: Enable in M365 Security Centre, add CNAME records to DNS
- DMARC: Add TXT record: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
Configure anti-phishing policy:
Enable impersonation protection for your CEO and finance directors. Enable mailbox intelligence.
Block legacy authentication:
Old protocols (POP3, IMAP, basic auth) bypass MFA. Disable them in Conditional Access.
Phase 4: Set Up Third-Party Backup
Microsoft does NOT back up your email data. Their retention policies protect against accidental deletion for 30 days — not against bulk deletion, corruption, or extended data loss.
Add: Veeam Backup for M365, Acronis, or Spanning. Cost: AED 15 to 30 per user per month.
Common Migration Mistakes
| Mistake | Fix |
|---|---|
| Not setting up SPF/DKIM/DMARC | Emails land in spam; domain spoofable |
| Skipping MFA | First account compromise is only a matter of time |
| No backup solution | Next accidental bulk delete has no recovery |
| Not revoking access for leavers | Ex-employee can still access email for months |
Microsoft 365 Migration: Frequently Asked Questions
What's the biggest mistake in Microsoft 365 migrations? Treating email import as the whole migration — a proper setup also requires licence selection, security hardening (MFA, SPF/DKIM/DMARC), and ongoing management, which most Dubai SMEs skip after finishing the email piece.
Cutover or staged migration for a Dubai SME? Cutover migration for under 150 mailboxes — the whole migration completes in 1 to 3 days. Staged migration, done in batches over weeks, is only needed for 150+ mailboxes or complex on-premise Exchange environments.
Does Microsoft 365 back up email automatically during and after migration? No — Microsoft's native retention only protects against accidental deletion for 30 days, not bulk deletion or corruption. A third-party backup tool (Veeam, Acronis, Spanning) is needed for real protection.
What security step prevents the most account compromises after migration? Enabling MFA for all users — this single step prevents 99.9% of account compromises and should be configured immediately after migration, not left for later.
SAS IT manages Microsoft 365 migrations for Dubai SMEs. Get migration help | +971-526716178
Related: Managed IT Services Dubai | Server Solutions Dubai
Tags
About the Author
Reviewed by Mustafa Husain, Founder of SAS IT Services, with 10+ years of experience in IT infrastructure, networking, and security — alongside the same engineers who design, install, and support the work described on this site. SAS IT Services was founded on 22 February 2020 in Dubai and has since delivered 500+ projects for businesses across the UAE.
We specialize in Fortinet, Cisco, and Microsoft, among 17 vendor product lines we regularly install, configure, and support across networking, cybersecurity, CCTV, and cloud infrastructure — hands-on experience that informs the technical guidance in our articles.
Our work is independently rated 5.0 out of 5 from 17 verified Google Reviews. Every article is reviewed internally for technical accuracy before publishing and reflects practices we apply on real client deployments in Dubai and the UAE.
SAS IT Services — Dubai
Need expert IT support?
Our experienced engineers cover all of Dubai & UAE with same-day response and 24/7 support contracts.