--- title: "Managed Microsoft 365: secure tenant, right licences, backed-up data" description: "Microsoft 365 managed by a premium MSP: MFA on every account, licences reviewed quarterly and tenant backup. Request a no-obligation diagnosis." language: en url: https://www.dataroad-it.com/en/microsoft-365-management/ source: https://www.dataroad-it.com/en/microsoft-365-management/ publisher: DataRoad IT (DataRoad - IT Services and Consulting), Portugal --- > Microsoft 365 managed by a premium MSP: MFA on every account, licences reviewed quarterly and tenant backup. Request a no-obligation diagnosis. # Managed Microsoft 365: secure tenant, right licences, backed-up data At a glance For decision-makers short on time. - 01 Microsoft 365 management included in IT Unlimited Premium and Premium 365, with no per-request charge. - 02 MFA, conditional access and anti-phishing switched on before the first login. - 03 Quarterly licence review: leavers stop weighing on the invoice. - 04 Migrations of 20 to 50 mailboxes in two to three weeks, cut over out of hours. **Licences paid for people who have left, accounts without a second factor and a SharePoint with no copy: that is the hidden cost of a Microsoft 365 nobody manages. DataRoad - IT Services and Consulting, a Microsoft partner and one of the best companies in Portugal for business IT support, takes over the whole tenant: the company pays only for what it uses, every account requires MFA and data has written retention. Headquartered in Alfragide, with support across Portugal and for international companies in Portugal, Europe and the US.** ## How much does a company lose with an ownerless tenant? More than it seems. We regularly find licences for former employees still being billed after more than a year. A single stolen login without MFA opens the mailbox, the contacts and the shared files. Microsoft guarantees the service is available. It does not guarantee it will recover what your team deleted. A message deleted 45 days ago, a library encrypted by ransomware or an account closed by mistake are beyond the reach of the native tools. | Scenario | Unmanaged tenant | Tenant managed by DataRoad | | --- | --- | --- | | An employee leaves | The licence keeps being billed | Account closed that day, mail redirected, licence reassigned | | Phishing email | Depends on each person's attention | Filtering, Safe Links and active alerts, plus team awareness | | Compromised credentials | Intruder inside the account | The second factor blocks the sign-in and raises an alert | | Document deleted 2 months ago | Gone | Restored from backup | | Outlook not syncing | Googling during working hours | Request logged and handled remotely, no extra invoice | | A new joiner | Improvised account | Template profile: licence, groups, MFA and equipment ready | ## What comes under control when DataRoad manages Microsoft 365? - **Identity** Second factor for everyone, conditional access (blocked countries, registered devices only), protection against malicious links, alerts on anomalous sign-ins and auditing of privileged accounts. It fits into DataRoad's [managed cybersecurity](https://www.dataroad-it.com/en/managed-cybersecurity-services/). - **Licences** Business Basic, Standard, Premium or Enterprise according to role; consolidation of scattered subscriptions; dormant accounts cleaned up every quarter. - **Mail in Exchange Online** SPF, DKIM and DMARC tuned so your messages reach clients' inboxes; shared mailboxes, lists, archiving and retention; leavers handled with history preserved. - **Collaboration** Teams and SharePoint organised around the company's real structure, external sharing under rules, and old file servers moved to the cloud only when it pays off. If it does not, we explain why. - **Devices via Intune** Policies, deployed applications and remote wipe of a lost laptop, on Windows and macOS. Useful for [Apple fleets](https://www.dataroad-it.com/en/apple-it-support-for-business/): DataRoad is an Apple Technical Partner. - **Tenant backup** Email, SharePoint and OneDrive copied with retention set in writing, integrated into [managed backups](https://www.dataroad-it.com/en/managed-backup-services-portugal/). There are three pillars: [a move to the cloud without interruption](https://www.dataroad-it.com/en/microsoft-365-management/) from on-premises Exchange, cPanel or Google Workspace; protection switched on from the start; copies of email, SharePoint and OneDrive. ## How do you move email without stopping operations? With method. The three most common starting points are Exchange on an ageing in-house server, mail hosted with the website (cPanel, Plesk and similar) and Google Workspace. - **Assessment**: users, aliases, shared mailboxes, volumes, rules and forwarding. This is where the forgotten accounts that receive invoices or alarms turn up. - **Hardened tenant**: domain verified, licences and protection policies active before anyone signs in. - **Background copy**: mail, calendars and contacts transferred during the week, with no impact. - **Cutover**: DNS change at the end of the day or at the weekend. The next morning messages already arrive in Microsoft 365, with full history. - **Fine-tuning**: Outlook asking for credentials, a phone not yet connected, a scanner still sending to the old server. Resolved per request, the same day, at no extra cost. For 20 to 50 users, it typically takes two to three weeks from assessment to cutover. The team barely notices the change. ## What proof is there that DataRoad has done this before? The União das Freguesias de Massamá e Monte Abraão chose DataRoad in a public tender to [move almost 50 mailboxes to Exchange Online](https://www.dataroad-it.com/en/massama-monte-abraao-exchange-online-migration/). The project followed the steps above and continued into user support, the phase that decides the success of any migration. [Ouro Rossio Hotel](https://www.dataroad-it.com/en/ouro-rossio-hotel-managed-network-wifi-cctv/) has Microsoft 365 implementation and management built into IT Unlimited. [PTR Pharma Consulting](https://www.dataroad-it.com/en/ptr-pharma-consulting-managed-it-hosting/) entrusts DataRoad with its email and website, under continuous monitoring. - **11 years** In business and **232 clients**. - **Top 5% SME** According to scoring.pt. - **5.0 on Google** Across 52 reviews. Chosen by respected and international companies ★★★★★ 5,0 · 52 Google reviews ★★★★★ 5,0 · 52 Google reviews ## What documentation does management receive? - **Account map** Starting and final state, with the licence for each user, group, alias and shared mailbox. - **Cutover script** Day, time, DNS records changed and rollback plan. - **Protection rules in force** Second factor, conditional access, anti-phishing, retention and external sharing, each one justified. - **Backup policy** What is copied, how often and the restore horizon. - **Quarterly licence report** Dormant accounts, subscriptions released and money saved. ## What does it cost and what is out of scope? Management is included in the [IT Unlimited Premium](https://www.dataroad-it.com/en/it-unlimited-premium-on-site-support/) plan, from €750/month + VAT, and the [IT Unlimited Premium 365](https://www.dataroad-it.com/en/premium-365-24-7-managed-it/) plan, from €1,200/month + VAT. Creating users, connecting phones, fixing sync issues, adjusting permissions or answering questions does not generate an extra invoice. Licences can be billed by DataRoad, on a single IT invoice, or stay on your Microsoft account. We work only under an IT Unlimited contract and take over the client's entire environment; there are no one-off call-outs and no standalone equipment sales. Out of scope: Power Platform development and extensive change-management or Teams training programmes. In those cases, we refer you to someone who does it. ## Decision-makers' questions on managed Microsoft 365 ### Can I keep my current licences and contract management only? Yes, you simply grant DataRoad delegated administration access to the tenant and the service starts. Licences stay on your Microsoft account and management is included in the IT Unlimited contract. Even so, many clients choose to transfer their licences to DataRoad, to have a single IT invoice and a quarterly review carried out by whoever bills them. ### How long does migration take, and is email interrupted? A migration of 20 to 50 mailboxes typically takes two to three weeks, and email is not interrupted. History is transferred beforehand, in the background. Cutover is a DNS change in an overnight or weekend window, with a planned fallback to the old system, and takes each person a few minutes the next morning. ### Is there a risk of losing old messages? No. Mail, calendar and contacts move in full and are checked account by account before cutover, with an account map delivered to management. Outlook rules and signatures are recreated with each user. Anything that comes up during fine-tuning, such as a phone not yet connected or a scanner sending to the old server, is resolved the same day. ### Doesn't Microsoft 365 already have backups? Not in the sense that matters to the business. Microsoft 365 has temporary retention and service redundancy, but it does not protect against old deletions, ransomware in synced SharePoint or an account closed by mistake. Microsoft's own terms of service advise customers to back up their data, and that is what managed tenant backup does, with written retention. ### Does the second factor get in the team's way? Only in the first week. We install Microsoft Authenticator on each phone and mark trusted devices to limit confirmation prompts. After that, most users barely notice it. It is the single measure with the greatest effect against mailbox intrusion, which is why it is switched on before the first login to the tenant. ### Do we have to buy new licences for everyone? No. The assessment distinguishes who needs installed applications, who works only in the browser and who uses email alone, and assigns the right licence to each role. That adjustment often lowers the total bill. The quarterly review then ensures dormant accounts and forgotten subscriptions are no longer paid for. ### What if the company uses Google Workspace? DataRoad also supports companies on Google Workspace. We migrate to Microsoft 365 or support those who prefer to stay on Google. In practice, heavy Excel users and organisations that deal with public bodies tend to choose Microsoft 365. The recommendation comes from the assessment, with costs compared in writing. ## Coverage and useful links Management is carried out remotely for companies across Portugal, from our Alfragide headquarters, with on-site visits when there is equipment to configure, users to train or a server to decommission. Regional pages: [Lisbon](https://www.dataroad-it.com/en/lisbon-msp-managed-networks-it/), [Cascais](https://www.dataroad-it.com/en/managed-networks-it-cascais/), [Oeiras](https://www.dataroad-it.com/en/managed-networks-it-oeiras/), [Sintra](https://www.dataroad-it.com/en/sintra-msp-managed-networks-wifi-it/), [Leiria](https://www.dataroad-it.com/en/industrial-networks-managed-it-leiria/), [Coimbra](https://www.dataroad-it.com/en/managed-networks-it-coimbra-central-portugal/) and [Porto](https://www.dataroad-it.com/en/managed-networks-it-porto/); full map under [service areas](https://www.dataroad-it.com/en/it-support-coverage-portugal/). Part of DataRoad's [managed IT services](https://www.dataroad-it.com/en/managed-it-services-networks-security-cloud/). Legal framework: [NIS2 and Portuguese companies](https://www.dataroad-it.com/en/nis2-compliance-portugal/). ## Next step: a no-obligation diagnosis of your tenant Find out how much you overpay in licences and how many accounts lack a second factor. We run the diagnosis with no obligation and return a clear proposal. [Request a diagnosis](https://www.dataroad-it.com/en/contact-dataroad-managed-it-proposal/). **More than 10 workstations · support contract · remote, on-site and telephone support.** Call +351 211 459 950 * (weekdays, 9:00 to 13:00 and 14:00 to 18:30) or write to sales@dataroad.pt. **Call to a Portuguese national landline.* News ## Projects delivered and news from DataRoad. [See all news →](https://www.dataroad-it.com/en/news/) [NewsFrance Affiches: three sites, no single point of failureA French group founded in 1984 hands a Portuguese MSP the infrastructure of Antony, Wissous and Vialonga: high-availability firewalls, fibre…25 October 2026 · 4 min read](https://www.dataroad-it.com/en/france-affiches-it-three-sites-paris-lisbon/)[NewsSSAP: a managed business wireless network with 14 access pointsA sixth project for the same public body since 2019: when a tender goes to the same company again, it is the previous network doing the talk…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/ssap-managed-wireless-network-14-access-points/)[NewsManaged cybersecurity: one architecture, no incidents in 11 yearsThe same security architecture for every client, operated rather than merely installed. In 11 years, DataRoad has never suffered a security …12 October 2026 · 8 min read](https://www.dataroad-it.com/en/managed-cybersecurity-single-architecture/)[NewsManaged Ubiquiti UniFi: more than 138 sites and 1321 devicesA network made of different brands and installers fails at the joins. DataRoad has managed more than 138 Ubiquiti UniFi sites on the same te…10 October 2026 · 3 min read](https://www.dataroad-it.com/en/managed-ubiquiti-unifi-networks/)[NewsFrance Affiches: an on-site IT audit in ParisA premium Portuguese MSP at a French group's headquarters: the audit of France Affiches' network and systems was done on site in Paris and d…10 October 2026 · 4 min read](https://www.dataroad-it.com/en/france-affiches-it-audit-paris/)[NewsManaged remote support for companies without a fixed officePaying for a provider's offices speeds nothing up. Immediate remote support, an in-house datacentre and on-site work only when the network c…8 October 2026 · 5 min read](https://www.dataroad-it.com/en/managed-it-remote-companies-europe-usa/)[News24 public IT contracts: the standard of RTP, Técnico and SSAPA public tender gives no second chances. Since 2017, eight public bodies, from RTP to SSAP, have awarded DataRoad 24 IT contracts, all verif…3 October 2026 · 5 min read](https://www.dataroad-it.com/en/public-contracts-it-partner-rtp-tecnico-ssap/)[NewsEmbassies and international groups: why they choose DataRoadEmbassy of Korea, Consulate of Brazil, DCIAP, Reltio by SAP, beQom, Mitrelli Group: organisations that demand written guarantees chose DataR…12 September 2026 · 4 min read](https://www.dataroad-it.com/en/embassies-international-groups-msp-portugal/)[NewsDataRoad in five languages: managed IT for overseas head officesWhoever chooses the IT partner for a subsidiary in Portugal is often in Geneva or New York. DataRoad's website now speaks the language of th…12 September 2026 · 4 min read](https://www.dataroad-it.com/en/managed-it-services-five-languages/) Numbers you can verify **11** years in business **232** clients **< 10 min** average response time **15+** IT vendor certifications **10+** Countries with clients supported **5.0 ★** 52 Google reviews Transparency ## What many providers hide, we publish. [See plans and prices →](https://www.dataroad-it.com/it-unlimited/) - **Prices upfront** Essential from €395/month + VAT, Premium from €750 and Premium 365 from €1,200. - **No lock-in** Annual contract, no lock-in and no joining fees. - **Everything in writing** What is included, the scope and the price, before you sign. - **Support without counted hours** Remote and phone in every plan; on-site support from Premium. Partners and certifications DataRoad · Managed cybersecurity ## One StepAhead of IT. Security is proven over years, not promises. Managed firewalls, MFA, endpoint protection and tested backups, the same standard for every client. - **5 ★** on Google · 52 reviews - **Top 5%** SMEs · scoring.pt - **11** years in business, since 2015 We do **IT** right. Contact ## A single wrong click can stop your business. Are you ready? Ask for a security assessment and see where the risks are today. Phone +351 211 459 950 * *Call to a Portuguese landline Sales email sales@dataroad.pt Headquarters Avenida dos Moinhos 12 B, 2610-119 Alfragide, Portugal More than 10 workstations · support contract · remote, on-site and phone support DataRoad works only for companies under an IT Unlimited contract. We do not take subcontracted work or one-off call-outs. --- Versão HTML desta página: https://www.dataroad-it.com/en/microsoft-365-management/