Microsoft 365 services data protection mechanisms
This article provides a high-level analysis of the Exchange Online and SharePoint Online data protection mechanisms. After migrating to Exchange Online and SharePoint Online, you need to consider the available Exchange Online and SharePoint Online data protection mechanisms. All Office365 components are adequately protected from accidental deletion via the usage of various Office365 features. The article discusses the Microsoft 365 services data protection mechanisms.
The following features are offered out of the box for Office 365 data protection.
| Feature |
|---|
| Sharepoint and OneDrive for Business Recycle Bins |
| Sharepoint and OneDrive for Business file versioning |
| Exchange Online journaling and data archiving (backup) |
| Exchange Online Mailbox Protection https://docs.microsoft.com/en-us/exchange/back-up-email |
| Exchange Online Archiving https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-an-archive-and-deletion-policy-for-mailboxes |
| Exchange Online Deleted items folder and Recoverable items folder https://docs.microsoft.com/en-us/exchange/back-up-email |
| Exchange Server Hybrid configuration |
| Exchange Online In-place hold and litigation hold |
| Exchange server retention policies https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies |
| Microsoft teams data retention policies |
All the above features are normally fully enabled in the Microsoft 365 environment. Therefore, in most cases, there is no apparent need for an additional backup mechanism for Microsoft 365 data. For the purposes of backup for data disaster recovery or point-in-time recovery, for examples in cases of ransomware, a full cloud-to-cloud backup solution will need to be configured.
A Microsoft 365 backup solution which is offered with zero cost, since it is open source software is Corso Backup. Corso is the first open-source tool that aims to assist IT admins with the critical task of protecting their Microsoft 365 data. It provides a reliable, secure, and efficient data protection engine. Admins decide where to store the backup data and have the flexibility to perform backups of their desired service through an intuitive interface. As Corso evolves, it can become a great building block for more complex data protection workflows. Corso supports Exchange Online, OneDrive for Business, SharePoint Online and Teams. Coverage for more services, possibly beyond M365, will expand based on the interest and needs of the community. Exchange Online and SharePoint Online data protection mechanisms can be extended by backup tools such as Corso.