--- title: "Managed Microsoft 365 for SMEs | DataRoad IT" description: "Managed Microsoft 365 for SMEs: the right licences, MFA switched on, an orderly migration and the backup Microsoft does not do for you. No obligation." language: en url: https://www.dataroad-it.com/en/managed-microsoft-365-sme-licences-backup/ source: https://www.dataroad-it.com/en/managed-microsoft-365-sme-licences-backup/ publisher: DataRoad IT (DataRoad - IT Services and Consulting), Portugal --- > Managed Microsoft 365 for SMEs: the right licences, MFA switched on, an orderly migration and the backup Microsoft does not do for you. No obligation. # Managed Microsoft 365 for SMEs: licences, MFA and backup in order At a glance For decision-makers short on time. - 01 Microsoft guarantees the service, not the recovery of your data: backup is the company's job. - 02 Former employees' accounts are the most common licence waste and the easiest to cut. - 03 MFA for everyone, administrators included, is the measure that reduces risk most. - 04 Review licences every quarter and test a restore at least once a year. ### In this article In most Portuguese SMEs, Microsoft 365 costs more than it should and protects less than it seems. **Managed Microsoft 365** tackles the three gaps we find almost every time: oversized licences, security left switched off and the belief that Microsoft keeps a copy of your data. With simple routines and a named owner, all three disappear. ## Is data in Microsoft 365 really protected? Not in the way most people imagine. Microsoft ensures that the **platform is available** and that it does not lose information through a failure of its own infrastructure. Protecting your data against mistakes, attacks or carelessness within the company is another matter, and that responsibility lies with the customer. Here is where the difference hurts: - **A folder deleted without anyone noticing** The problem only surfaces months later. - **A compromised account** The attacker gets in and deletes content. - **Ransomware** Synchronised files are encrypted. In all these cases, native retention has short time limits. Once they expire, the information is lost. If the company's email and documents live in Microsoft 365, you need a [dedicated backup, with tested restores](https://www.dataroad-it.com/en/managed-backup-services-portugal/) and retention you decide. The cost is small compared with what is safeguarded. ## How much are you overpaying for licences? Almost always, something. The typical mistake is giving everyone the same plan. Someone who lives in Excel and PowerPoint does not need the same as someone who only reads email and stores a few files. Before the next renewal, answer for each user: - Do they use the installed applications, or is the web version enough? - Do they exceed the storage of the base plan? - Do they need advanced security and compliance features? Done rigorously, this review finds licences that can drop a plan and others that should not exist at all. **The easiest waste to cut is the accounts of people who have left.** An account forgotten for a year is paid for every month and remains an attack route. A quarterly check solves both at once. ## Which security has to be on from day one? - **MFA for everyone** Administrators first, because they are the favourite target. - **Legacy authentication disabled** Old protocols allow the second factor to be bypassed. - **Alerts on forwarding rules** Creating a rule that sends all email outside is the first move of anyone who has taken over an account. - **Sharing links audited** Access open to anyone, created years ago and forgotten. - **Auditing switched on** After an incident, it is the only record that shows what happened. These measures should exist in any business subscription. In many, they do not. ## How do you migrate files without inheriting the mess? Moving email holds no surprises these days. It is the files that go wrong, and rarely for technical reasons. The hard part is deciding where each thing belongs: individual, team and company documents belong in different places. A critical file stored in someone's personal area walks out of the door with that person. Set three rules before copying the first file: - **What belongs to the team stays with the team** In SharePoint or Teams, never in someone's OneDrive. - **Permissions assigned to groups** Not user by user. - **Clean up before moving** The old server's folder tree is simplified, not replicated. And allow time for adjustment. The technology is swapped in a weekend; habits take weeks. ## Which routines keep Microsoft 365 healthy? The platform changes constantly and an untended subscription degrades silently. Four routines are enough: | When | What | | --- | --- | | Every quarter | Review licences and active accounts | | Regularly | Audit external sharing | | At least once a year | Carry out a real restore from backup | | Whenever people join or leave | Adjust access | None requires deep technical knowledge. They require an owner. That is precisely where they tend to fail. ## Who should manage your Microsoft 365? Someone who does it every day. DataRoad - IT Services and Consulting implements and manages [Microsoft 365 and cloud for businesses](https://www.dataroad-it.com/en/microsoft-365-management/): migration, security configuration and dedicated backup, integrated into our [managed IT services](https://www.dataroad-it.com/en/managed-it-services-networks-security-cloud/). Request a no-commitment proposal. **More than 10 workstations · support contract · remote, on-site and telephone support.** +351 211 459 950 * · sales@dataroad.pt **Call to a Portuguese landline.* Chosen by respected and international companies ★★★★★ 5,0 · 52 Google reviews ★★★★★ 5,0 · 52 Google reviews DataRoad ## Related articles [Managed IT and cybersecurityTeams on the move: securing laptops, phones and public Wi-FiThe real travel risk is an unencrypted lost laptop, not hotel Wi-Fi. With disk encryption, central management, MFA and a controlled connecti…12 October 2026 · 7 min read](https://www.dataroad-it.com/en/managed-cybersecurity-travelling-teams/)[Managed IT and cybersecurityExternal attack surface: what the internet sees of your companyAutomated attacks hunt for vulnerable versions, and company size is irrelevant. In 2025, CERT.PT recorded 3,864 incidents, 40% more than in …12 October 2026 · 5 min read](https://www.dataroad-it.com/en/external-attack-surface-managed-cybersecurity/)[Managed IT and cybersecurityNOC and managed cybersecurity: who watches your SME, and whenThe question is not whether you have a SOC: it is who receives the alert at 10 pm on a Saturday and what they do next. At DataRoad, nights, …12 October 2026 · 6 min read](https://www.dataroad-it.com/en/noc-managed-cybersecurity-sme/)[Managed IT and cybersecurityMicrosoft 365 security: the 10 controls that are yoursIn Microsoft 365, the platform is Microsoft's and the keys are yours. According to Microsoft, MFA and blocking legacy authentication stop mo…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/microsoft-365-managed-cybersecurity-shared-responsibility/)[Managed IT and cybersecurityGDPR and managed cybersecurity: 10 technical controls to proveWithout documented technical measures, a data breach turns from an IT incident into a problem with the regulator. Ten controls in three bloc…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/gdpr-managed-cybersecurity-10-technical-measures/)[Managed IT and cybersecurityExposed passwords: audit your domain and close the door in 5 daysThe risk is not the email appearing in a breach: it is the same password opening a work account. Change what is exposed, MFA on every accoun…12 October 2026 · 5 min read](https://www.dataroad-it.com/en/company-credentials-data-breach-check/)[Managed IT and cybersecurityAsset inventory: the basis of IT estate management and NIS2Without an asset inventory there is no planned renewal, no demonstrable security and no answer to CNCS. NIS2 entities must submit the list o…12 October 2026 · 7 min read](https://www.dataroad-it.com/en/it-asset-inventory-management-nis2/)[Managed IT and cybersecurityBreak-glass accounts in Microsoft 365: your company's insuranceA locked-out admin can leave email, Teams and files unmanaged for days. Break-glass accounts are the reserve administrator you only use when…12 October 2026 · 5 min read](https://www.dataroad-it.com/en/microsoft-365-break-glass-accounts/)[Managed IT and cybersecurityWindows 365 for business: when a cloud PC cuts costsA cloud PC pays off for consultants, seasonal staff, teams without an office and mixed Mac and Windows estates. For video, CAD or weak inter…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/windows-365-business-cloud-pc-costs/) Numbers you can verify **11** years in business **232** clients **< 10 min** average response time **15+** IT vendor certifications **10+** Countries with clients supported **5.0 ★** 52 Google reviews Transparency ## What many providers hide, we publish. [See plans and prices →](https://www.dataroad-it.com/it-unlimited/) - **Prices upfront** Essential from €395/month + VAT, Premium from €750 and Premium 365 from €1,200. - **No lock-in** Annual contract, no lock-in and no joining fees. - **Everything in writing** What is included, the scope and the price, before you sign. - **Support without counted hours** Remote and phone in every plan; on-site support from Premium. Partners and certifications DataRoad · Managed cybersecurity ## One StepAhead of IT. Nobody notices security until the day it fails. That is why ours works every day: alerts handled, access reviewed, backups verified. - **11** years in business, since 2015 - **0** DataRoad security incidents in 11 years - **232** companies protected We do **IT** right. DataRoad IT Unlimited ## Does your IT depend on a single person? Documentation, inventory and one contact who answers for everything. [Request a proposal, no commitment →](https://www.dataroad-it.com/en/#contact)+351 211 459 950 **Call to a Portuguese landline · More than 10 workstations · support contract · remote, on-site and phone support[Not sure what you need? Talk to the assistant →](https://www.dataroad-it.com/en/#assistente) --- Versão HTML desta página: https://www.dataroad-it.com/en/managed-microsoft-365-sme-licences-backup/