SAS ITWhy Most M365 Migrations in Dubai Go Wrong
The biggest mistake: importing email and calling the migration done. A proper Microsoft 365 setup involves 4 areas — licence selection, email migration, security hardening, and ongoing management. Most Dubai SMEs only complete the first two.
Phase 1: Choose the Right Licence
| Plan | Cost per User/Month (AED) | Who Needs It |
|---|---|---|
| Business Basic | 55 | Web-only users, no Office apps |
| Business Standard | 105 | General staff needing Office desktop apps |
| Business Premium | 185 | IT admins, finance, HR — need Intune + Defender |
Tip: Mix licences. Most staff → Business Standard. IT admin, finance, senior management → Business Premium. Do not put everyone on Premium.
Phase 2: Email Migration (Cutover vs Staged)
Cutover migration (under 150 mailboxes, recommended for most Dubai SMEs):
1. Add and verify your domain in Microsoft 365 Admin Centre
2. Create all user accounts and assign licences
3. Set up Exchange Online connectors
4. Run the Migration Wizard — all mailboxes migrate in 1 to 3 days
5. Update MX record to point to Microsoft 365
6. Verify email is flowing
7. Remove old email system
Staged migration (150+ mailboxes or complex on-premise Exchange):
Migrate in batches by department over several weeks. Requires Exchange hybrid configuration.
Phase 3: Security Hardening (Most Companies Skip This)
After migration, immediately configure:
Enable MFA for all users:
M365 Admin > Users > Multi-Factor Authentication. Enable for all users. This single step prevents 99.9% of account compromises.
Set email authentication records:
- SPF: Add to DNS (TXT record provided by Microsoft)
- DKIM: Enable in M365 Security Centre, add CNAME records to DNS
- DMARC: Add TXT record: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
Configure anti-phishing policy:
Enable impersonation protection for your CEO and finance directors. Enable mailbox intelligence.
Block legacy authentication:
Old protocols (POP3, IMAP, basic auth) bypass MFA. Disable them in Conditional Access.
Phase 4: Set Up Third-Party Backup
Microsoft does NOT back up your email data. Their retention policies protect against accidental deletion for 30 days — not against bulk deletion, corruption, or extended data loss.
Add: Veeam Backup for M365, Acronis, or Spanning. Cost: AED 15 to 30 per user per month.
Common Migration Mistakes
| Mistake | Fix |
|---|---|
| Not setting up SPF/DKIM/DMARC | Emails land in spam; domain spoofable |
| Skipping MFA | First account compromise is only a matter of time |
| No backup solution | Next accidental bulk delete has no recovery |
| Not revoking access for leavers | Ex-employee can still access email for months |
SAS IT manages Microsoft 365 migrations for Dubai SMEs. Get migration help | +971-526716178
*Related: Managed IT Services Dubai | Server Solutions Dubai*
Tags
About the Author
Written by the SAS IT Team — the same engineers who design, install, and support the networking, security, and infrastructure work described on this site. SAS IT Services was founded on 22 February 2020 in Dubai and has since delivered 500+ projects for businesses across the UAE.
We are a certified technology partner for Fortinet, Cisco, and Microsoft, among 17 documented vendor partnerships spanning networking, cybersecurity, CCTV, and cloud infrastructure — credentials that inform the technical guidance in our articles.
Our work is independently rated 5.0 out of 5 from 17 verified Google Reviews. Every article is reviewed internally for technical accuracy before publishing and reflects practices we apply on real client deployments in Dubai and the UAE.
SAS IT Services — Dubai
Need expert IT support?
Our certified engineers cover all of Dubai & UAE with same-day response and 24/7 support contracts.