Microsoft 365 Backup: Protect your business with data recovery
In today's digital age, ensuring the safety and availability of your data is paramount. Microsoft 365 offers robust solutions for data backup and recovery, designed to help restore your data and get your business back on track in the face of various challenges like ransomware events or accidental deletions. Microsoft 365 Backup services go beyond standard protection to make sure that your data remains compliant, protected, and recoverable when you need it most. Backup is not about just backing up data anymore, it’s about fast recovery in a secure environment. If you don’t have a fast restore solution, then your data is still at risk. Why backup your Microsoft 365 data? As your organization creates and stores more data, it’s important that you protect your operations from bad actors and state-sponsored ransomware attacks, which are on the rise. Microsoft 365 has a shared responsibility model, where Microsoft provides the availability and durability of the service, while customers are responsible for their data management and protection. Microsoft offers ways to help you maintain business continuity in both service failure and customer-side breaches. Service failure: Microsoft 365 natively offers high availability and disaster recovery. This is covered in the standard Microsoft 365 data resiliency documentation. While no service has guaranteed 100% uptime, the key considerations are data durability and speed of recovery; both of which Microsoft 365 handles natively and robustly. Customer-side data breaches, such as ransomware attacks or mistaken modification/deletion, require a fast and scalable restore solution that provides a recovery path to keep your business running. We highly recommend procuring either the native Microsoft 365 Backup solution or a recognized ISV application built on Microsoft 365 Backup Storage. These solutions are best equipped to recover your tenant’s data quickly at scale, offering protection and peace of mind while ensuring your data remains compliant. How Microsoft 365 Backup goes beyond standard backup Microsoft 365 Backup offers distinct advantages over standard high availability and disaster recovery provided by the base service and over traditional export-only solutions. Namely, it provides heightened security and privacy, and most importantly it provides a fast recovery path for an extended period of time. The enhanced security and privacy come from the fact that your data is kept in its natively encrypted format within the Microsoft 365 trust boundary. Simplify compliance, enhance security, and support data residency Automatic geo residency adherence Strictly limited data access and scope Fully auditable actions Immutable backup storage This retains the security, compliance, and privacy promises inherent in our services. It also puts control over these restores into your hands, rather than managing the restore through support agents. This can provide crucial time savings when every minute counts. Admins can restore individual files, emails, calendar items, and site metadata either in-place or to new locations, minimizing disruption. Microsoft 365 automatically backs up data and offers restore points for the past 14 days. With the addition of Microsoft 365 Backup, you can restore data from Exchange, SharePoint, and OneDrive to effectively any point within the past year— safeguarding business data so that you can recover it back to a healthy state. While Microsoft 365 includes 14 days of standard point-in-time backup, Microsoft 365 Backup has a 1-year retention period with recovery point objectives of every 10 minutes for Exchange, and every 10 minutes for 14 days, then weekly for OneDrive and SharePoint. See the table below for more details. Standard Microsoft 365 Cloud Storage (E/M SKUs) Microsoft 365 Backup Data types covered OneDrive, SharePoint, Exchange OneDrive, SharePoint, Exchange Retention period 14 days 1 year Backup frequency Based on file versions for self-service tooling; ~10 minutes using support call route Every 10 minutes for 52 weeks for Exchange Every 10 minutes for 14 days, then weekly for OneDrive and SharePoint & daily for files Restore speed Manual low-scale native restore; Support-call based 14-day restore (best effort) Up to and beyond 3 TB/hour at scale (Microsoft research, 2025) Admin experience Admin center, OneDrive/SharePoint UI, Exchange, PowerShell Integrated into Microsoft 365 Admin Center Use cases Day-to-day collaboration, file sharing, email Designed for low volume Ransomware recovery, accidental deletion, mass rapid restore With Microsoft 365 Backup or an ISV solution built on our platform, you can restore your OneDrive, SharePoint, and Exchange Online data at bulk recovery speeds of up to and beyond 3TB per hour for large scale bulk restores for an average-size tenant (Microsoft research, 2025). Ransomware is a growing concern Ransomware attacks are becoming increasingly common, posing significant threats to organizations of all sizes. These attacks involve malicious software that encrypts a victim's data, rendering it inaccessible until a ransom is paid. “The frequency of ransomware incidents has been on the rise, with many organizations experiencing multiple attacks within a year. Verizon Business found that the presence of Ransomware, with or without encryption, in their dataset, in 44% of all the breaches they reviewed in 2025, up from 32% in 2024 – a 37% year-over-year increase” (Verizon Business, 2025 Data Breach Investigations Report: Executive Summary, 2025). Safeguard your business with Microsoft 365 Backup When you invest in a backup solution, you're essentially buying the ability to recover from a disastrous event, like a ransomware attack. It's important to restore business operations and critical data as quickly as possible to maintain business continuity and restore to the state (point in time) that your business requires. In addition, the complexity for IT admins in managing large-scale data across their ecosystem necessitates a solution designed for recovery at scale. Microsoft 365 Backup provides that even in the event of an attack, your data can be restored quickly – all without the additional risk and complexity of granting multiple applications read and write access over your data. Get started today Don’t wait for disaster to strike. Start backing up smarter, restoring faster, and sleeping easier. Check out our step-by-step guide for setting up Microsoft 365 Backup and our full Microsoft 365 Backup Best Practices Whitepaper for more information.Webinar: Get ready for the new age of Microsoft 365 data protection
As the global dataverse of Microsoft 365 continues to grow in scale and importance, so does the threat of cyberattacks targeting this vital data. That’s why we’ve teamed up with Veeam on an upcoming webinar: "The New Age of Microsoft 365 Data Protection". Join us for this free webinar as we explore effective strategies for safeguarding your essential Microsoft 365 data from cyberthreats and data loss incidents. Date: 26 September 2025 Time: 3:00pm IST / 2:30am PDT Register today: The New Age of Microsoft 365 Data Protection In this webinar, you’ll discover: Veeam Data Cloud for Microsoft 365 features: Learn about Veeam’s modern, secure, and intuitive backup solution designed to protect your Microsoft 365 data. Microsoft 365 Backup Storage integration: Understand how this seamless integration works and how it enhances your data protection strategy. Live demo: Witness the solution in action with an engaging live demo. Expert insights: Get your questions answered by Microsoft and Veeam experts. Speakers: Sagar Parkar, Inside Systems Engineer, Veeam India Diksha Upadhyay, Senior Product Manager, Microsoft Veeam is one of our industry-leading partners building on the Microsoft 365 Backup Storage platform to offer our customers fast backup and recovery for your Microsoft 365 data – with recovery speeds of up to 2 TB per hour at scale – along with additional features and unified experiences that integrate Microsoft 365 and other cloud data sources into a single interface. Don't miss out on this opportunity to enhance your data protection strategy and ensure your business stays secure. Register now to secure your spot! We look forward to seeing you there!How Microsoft 365 Backup works and how to set it up
Protect your Microsoft 365 data and stay in control with Microsoft 365 Backup — whether managing email, documents, or sites across Exchange, OneDrive, and SharePoint. Define exactly what you want to back up and restore precisely what you need to with speeds reaching 2TB per hour at scale. With flexible policies, dynamic rules, and recovery points up to 365 days back, you can stay resilient and ready. In this introduction, I'll show you how to minimize disruption and keep your organization moving forward even in the event of a disaster with Microsoft 365 Backup. Fine-tune what gets backed up. Back up by user, site, group, or file type — to meet your exact needs. Get started with Microsoft 365 Backup. Restore data in-place or to a new location. Compare versions before committing. Take a look at Microsoft 365 Backup. Restore content from months ago. Use fast weekly snapshots — even when the issue went unnoticed for weeks. Start here with Microsoft 365 Backup. QUICK LINKS: 00:00 — Automate recovery process 00:37 — How to use Microsoft 365 Backup 01:49 — Compare with migration-based solutions 02:30 — How to set it up 03:33 — Exchange policy for email backup 05:00 — View and manage backups 05:24 — Recover from a restore point 07:45 — Restore from OneDrive & SharePoint 08:33 — Bulk restore 09:41 — Wrap up Link References Check out https://aka.ms/M365Backup Additional backup and restore considerations at https://aka.ms/M365BackupNotes Unfamiliar with Microsoft Mechanics? As Microsoft’s official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast Keep getting this insider knowledge, join us on social: Follow us on Twitter: https://twitter.com/MSFTMechanics Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics Video Transcript: -If something bad happens, like someone accidentally does a bulk file deletion or files are corrupted by a malicious user or ransomware, the first question is, can we recover from our backup? And the second question is, how long until we’re back online? Now to help you automate a targeted recovery process, Microsoft 365 Backup has a self-service solution that helps you scope the data that you want to recover. Your data remains inside your Microsoft 365 trust boundary, providing bulk restore recovery speeds of up to 2 terabytes per hour at scale. -Now, you might be wondering, do I even need to back up Microsoft 365 data? Let’s look at where it makes sense. So, first, if there’s a natural disaster, Microsoft 365 already natively offers high availability and disaster recovery with built-in service resiliency. That said, if you experience a data breach or maybe unexpected data corruption from a processor person on your end, or because of ransomware, your Microsoft support options depend on the workload in Microsoft 365. For example, for SharePoint, if you do nothing additional at all, when you contact Microsoft Support, if the event happened up to 14 days prior, Microsoft will recover OneDrive and SharePoint to a previous state within that timeframe. That said, if you want to get more specific on what gets restored or want to go back further than 14 days to recover your data, this is where the Microsoft 365 Backup service comes in. It’s self-service by design for SharePoint Exchange and OneDrive, giving more targeted control to scope exactly what you need to restore for up to 365 days. We’ll be adding more Microsoft 365 Backup coverage to other Microsoft 365 workloads over time. -Let’s compare this with migration solutions that you may be familiar with. These solutions work by moving your data and transforming it to store it into their service. Then, for recovery, the backup has to be restored back to its original form, then migrated back to your Microsoft 365 tenant, adding significant recovery time. Instead, Microsoft 365 Backup takes incremental snapshots of your data. The data stays in your Microsoft 365 service boundary in its native encrypted form. So, when you need to recover your data, the recovery process is accelerated. Microsoft 365 Backup is a consumption-based service with billing based on the amount of data protected. -Next, let’s walk through the setup steps and controls to manage backups and restore them. Starting with setting up a billing plan, where in advance, you’ll need to have an Azure subscription as well as a defined resource group. So, from the Microsoft 365 admin center under Setup, you’ll activate pay-as-you-go services and select Get started. Here, I’ll choose my Azure subscription and the resource group, and the region. Note that this region here is only used for billing. Your data will remain in the location that it’s currently in. Now, still on this page from the Settings tab, in the Storage location, you’ll choose Backup. Then, turn it on and save to confirm. -Now, with the service running, the rest of the steps will be performed from the Microsoft 365 Backup page in the admin center. So, here, I can configure backup policies to initiate automated backup processes. I have navigated within settings to Microsoft 365 Backup. From there, each workload, SharePoint, Exchange, and OneDrive, can have its own individual policies. So, I’m going to walk through an Exchange policy for email backup, but all three follow similar steps. After hitting Set up policy, the overview page displays policy attributes like the backup frequency. In this case, it’s every 10 minutes. The backup retention up to one year. -Now, the backup frequency does not impact your costs. Here, I can choose the selection method. The options are to upload a CSV file with mailboxes. Now, for SharePoint policies, this would be sites, and for OneDrive, we’d target user accounts. You can also use a dynamic rule, which allows the mailboxes in scope to dynamically update as group membership changes. Or you can define specific filters where you can select up to three distribution lists or security groups, or both. Now, these are the same filters for OneDrive policies. And for SharePoint, you can use filters for site names, URL contains values, or site last modified dates. The final option is then to select mailboxes individually, where you can manually select the mailboxes that you want to back up. In my case, I’ll choose the dynamic rule and use distribution lists, and I’ll select Project Falcon and Northwind Traders. -Now, I just need to review, and from there, I can create the policy. The policy will typically be active within an hour of creation, depending on the size of your group, and you can edit policy attributes at any time. So, now with the policy created, let’s move on to the process of viewing and managing backups. I’m back on the Microsoft 365 Backup page, and now I have active policy set up for each workload. And as mentioned, I can make required edits and changes to these policies from here. For example, you can pause backups or add, or remove sites from the SharePoint policy. -So, at this point, all of our services are running automated backups. Now, let’s assume that something happened to our Exchange mailboxes that were backed up and we want to recover from our restore point. Now, to simulate that, I’m logged in as Adele. I’m deleting email from the last month and even removing those from the Deleted items folder. One thing to note is that a restore from Exchange will only impact items that were modified, hard-deleted, or purged during the recovery window. So, let’s recover those deleted emails. So, I can start that for Exchange by hitting Restore mailboxes. -Now, for the choose selection method option, there is an option to upload a CSV list of mailboxes or select them individually. I’ll choose that one. And then, I’ll search for Adele and there she is. Now, I’ll add her mailbox and hit Next. Then, in content scope, I can select all emails including notes, contacts, calendars, and tasks, or I can choose a specific timeframe as well as apply filters, as you can see here. I’m going to keep the default of all items. Then, I can choose a time before the event happened to restore too. From there, I’ll be presented with available restore points. Email restore points are created every 10 minutes from when the policy’s active for up to 365 days. And I’ll choose this one for April 4th at 8:40 AM. -Then, for the destination of restored items, I have two primary options. I can replace mailbox items with backups, or the current version of the items will be overwritten by the items recovered from the restore point. Or I can create new mailbox items from backups within the user’s mailbox, which will be named Recovered Items, with the year, month, day, and time. I’ll keep replace mailbox items. Note that only effective items as mentioned will be overwritten. Any items received after the restore point or unmodified items will not be reverted and will also not get copied over if you decide to create a new folder. Once I confirm and commit to the file restore, from there, I can track progress from the Restoration tasks tab in the Microsoft 365 Backup page and see how things are going. So, I’m going to fast forward a little in time. And just to prove it, I’m back in Adele’s mailbox, and you can see that all of the emails that I deleted before have returned. That’s Exchange. -And there are also a few differences when restoring from OneDrive and SharePoint worth pointing out. Now, I’ll start with SharePoint. Here, I can upload a CSV file of site addresses or select them individually. I’ll do that. Now, I can select exactly which sites I want. There we go. Then, in Search for backups, you’ll see that things are a little different compared to Exchange. And again, I need to choose a date closest to the restore event, as well as a time of day. And for the previous two weeks, there are standard restore points captured every 10 minutes. And for a small-scale restore where you want to prioritize speed over the exact restore time, the prioritized backup options shown here will be faster and is recommended. These faster restore points are taken roughly every 24 hours. -One other thing to note here, if you’re doing a bulk restore, for example, to thousands of sites, then the fast restore points are not relevant. If you want to restore beyond two weeks, because these are weekly snapshots, if I choose the most recent date, where I know that my content is safe, the tool will automatically select the closest restore point captured prior to my selected time. And these weekly restore points are also fast restore points too. The other options are similar to what I showed in Exchange, where you can use in-place Restore or also create new sites. Note that content restored to a new location will apply and address suffix of R, followed by the restore number in a numeric sequence for each restore, starting with R0, as you can see with this site’s URL. In this case, you can copy restored items manually from the restored location to the prior location as needed, and in-place restore will mean users recent edits made to sites, files, and metadata since the time of the restore point will be lost. You can find additional backup and restore considerations at aka.ms/M365BackupNotes. -As you saw today, Microsoft 365 Backup doesn’t just let you self-manage your backups, it helps you recover faster. To find out more, checkout aka.ms/M365Backup. And keep watching Mechanics for the latest tech updates, subscribe to our channel, and thanks for watching.
