In summary<\/p>\n
- \n
- Microsoft 365 does not back up your data<\/strong> as is the case with most companies. The responsibility for the data lies with the customer.<\/li>\n
- Most companies pay out too much in holiday pay<\/strong> \u2014 due to over-subscribed schemes and charges for those who have already left.<\/li>\n
- Our two-step authentication<\/strong> It is the single measure that reduces risk the most, yet it remains disabled in many subscriptions.<\/li>\n
- Migrating your email is easy; migrating files and habits<\/strong> It\u2019s just a lot of work.<\/li>\n<\/ul>\n<\/div>\n
\nIn this article<\/p>\n
- \n
- Choose a plan without paying extra<\/a><\/li>\n
- The misconception about backups<\/a><\/li>\n
- Minimum security<\/a><\/li>\n
- Files: where migrations go wrong<\/a><\/li>\n
- Day-to-day management<\/a><\/li>\n<\/ol>\n<\/div>\n
Microsoft 365 is now the backbone of most Portuguese businesses. Precisely because it is so widespread, it is also where the most costly mistakes tend to occur \u2014 almost always in three areas: excess licences, security settings that need configuring, and the misconception that data is automatically protected.<\/p>\n
Choose a plan without paying extra<\/h2>\n
The most common mistake is to assign the same plan to everyone. Within a company, user profiles vary greatly: those who spend their days working on spreadsheets and presentations do not have the same needs as those who only need email and a place to store files.<\/p>\n
Before renewing, it\u2019s worth asking yourself three questions: do you need the applications installed on your computer, or is the browser-based version sufficient? Do you need more storage space than the basic plan offers? Do you need advanced security and compliance features?<\/p>\n
In most companies, an honest review reveals a significant number of licences that could be downgraded \u2014 and just as many that simply should no longer exist.<\/p>\n
\nAccounts belonging to those who have left.<\/strong> It is the most common form of wastage and the easiest to rectify. An account belonging to an employee who left a year ago continues to be billed every month \u2014 and, worse still, remains a point of entry. A quarterly review sorts out both issues.<\/p>\n<\/div>\n
![\"Microsoft](\"https:\/\/www.dataroad.pt\/wp-content\/uploads\/2026\/04\/Office_365_Montage_v2-768x600.webp\")
The right licence depends on what the company actually uses \u2014 and security settings are not enabled by default.<\/figcaption><\/figure>\n The misconception about backups<\/h2>\n
This is the most dangerous misunderstanding, and it is worth being very clear about it.<\/p>\n
Microsoft guarantees the service availability<\/strong> \u2014 that the platform works and that you won\u2019t lose your data due to an infrastructure failure. That\u2019s not the same as backing up your data to protect against your own mistakes.<\/p>\n
If someone deletes a shared folder and nobody notices for months, if an account is compromised and its contents deleted, or if ransomware encrypts synchronised files, the built-in retention mechanisms have time limits. Once these time limits have passed, the content cannot be recovered.<\/p>\n
A company that relies on Microsoft 365 for email and documents needs a dedicated backup solution<\/a>, with a retention level set by you and a tested restoration. It is a small cost compared to what it protects.<\/p>\n
Minimum security<\/h2>\n
There is a set of features that should be enabled on any business subscription but which, in practice, are disabled with disconcerting frequency:<\/p>\n
- \n
- Two-step verification for everyone<\/strong> \u2014 with no exceptions for management, who are precisely the ones most targeted.<\/li>\n
- Blocking of legacy authentication protocols<\/strong>, which make it possible to get round the second factor.<\/li>\n
- Automatic email forwarding alerts<\/strong> \u2014 Creating a rule that forwards everything out of the account is the classic first step taken by anyone who compromises an account.<\/li>\n
- Review of external shares<\/strong> \u2014 files shared via a link with everyone, created two years ago and never looked at since.<\/li>\n
- Active audit trail<\/strong>, because after an incident, it\u2019s the only way to understand what happened.<\/li>\n<\/ul>\n
Files: where migrations go wrong<\/h2>\n
Migrating email is now a fairly straightforward process. What usually goes wrong is the file part \u2014 and the reason is rarely technical.<\/p>\n
The problem is deciding where everything lives<\/strong>. Personal work documents, team documents and company documents are stored in different places, and mixing them up creates confusion that lasts for years. When an important document is stored in someone\u2019s personal space, it leaves the company when that person leaves.<\/p>\n
It is worth establishing three rules before moving the first file: team files belong in team spaces; permissions are set by group, not by individual; and folder structures inherited from an old server should be simplified during migration, not replicated.<\/p>\n
And allow for a settling-in period. The technology can be migrated over a weekend; changing habits takes weeks.<\/p>\n
Day-to-day management<\/h2>\n
Microsoft 365 isn\u2019t the sort of product you install and then forget about. It changes frequently, and a subscription that isn\u2019t maintained will gradually deteriorate without you realising it.<\/p>\n
Four simple routines keep things in order: a quarterly review of active licences and accounts; a regular check of external shares; a live backup restoration test at least once a year; and a review of access rights whenever someone joins or leaves the organisation.<\/p>\n
None of these requires in-depth knowledge. They simply require someone to be given responsibility \u2014 and that is where things usually go wrong.<\/p>\n
DataRoad implements and manages Microsoft 365 and cloud solutions for businesses<\/a>, including migration, security configuration and dedicated backups, within the managed IT services<\/a>.<\/p>\n
\nA chat before making a decision<\/p>\n
Whether you\u2019re tackling a specific problem, planning a move or simply looking for a second opinion, we always start in the same way: by understanding your situation before making any suggestions. No obligation, no jargon and no catalogues.<\/p>\n
- Blocking of legacy authentication protocols<\/strong>, which make it possible to get round the second factor.<\/li>\n
- The misconception about backups<\/a><\/li>\n
- Most companies pay out too much in holiday pay<\/strong> \u2014 due to over-subscribed schemes and charges for those who have already left.<\/li>\n