In this episode, N-able Head Nerd Eric Harless talks to Sales Engineer Will Linthicum about why native Microsoft 365 tools aren’t sufficient for business‑grade protection and why a dedicated backup strategy matters for MSPs and IT teams. The conversation covers the shared responsibility model, the common misconception that “Microsoft backs it all up,” and practical risks ranging from accidental deletion to insider threats and ransomware. They explore core workloads – Exchange, OneDrive, SharePoint and Teams – and unpack where advanced licencing and features (e.g., conditional access, litigation hold) start and stop. They walk through a real‑world scenario of a compromised mailbox, the importance of MFA and geolocation rules, and the subtle ways attackers use mail rules and PowerShell to quietly purge data beyond recycle bins.Aligning data life‑cycles to compliance needsThe episode also addresses retention policies and offboarding: converting users to shared mailboxes, handling OneDrive content, and aligning data life‑cycles to compliance needs. Listeners hear candid guidance on what backup can and can’t do (it’s not DR or BC in itself), backup cadence and on‑demand snapshots, and known limitations like Information Rights Management and OneNote API access. Finally, the discussion touches on roadmap items such as online archive backup and PST restore, plus performance improvements to accelerate scans and handle throttling—placing emphasis on tabletop exercises and clear customer communication so MSPs sell continuity and peace of mind, not just “backup.”Who Should Listen to This Podcast…This podcast is essential listening for MSPs, IT solution providers, and corporate IT professionals responsible for safeguarding Microsoft 365 environments. Whether you’re an IT manager, systems administrator, or technical lead, you’ll gain practical insights into the realities of data protection, backup, and recovery in today’s threat landscape. The episode is particularly valuable for those navigating compliance requirements, managing user offboarding, or seeking to strengthen their organisation’s resilience against accidental deletion, insider threats, and ransomware. Topics coveredThe shared responsibility model for Microsoft 365 and why native tools aren’t enoughAccidental deletion, insider threats and ransomware as everyday risksPractical mailbox compromise triage: MFA, geolocation and Defender visibilityHow attackers abuse mail rules, nested folders and PowerShell to purge dataRetention “sweet spots” (1, 3, 5, 7 years) and long‑tail requirementsOffboarding workflows: converting to shared mailboxes and managing OneDriveBackup cadence, on‑demand backups and limits of recycle bins/versioningWhat M365 backup is (point‑in‑time restore) vs. what DR/BC areDisclaimer: This podcast provides educational information about issues that may be relevant to information technology service providers. Nothing in the podcast should be construed as any recommendation or endorsement by N-able, or as legal or any other advice. The views expressed by guests are their own and their appearance on the podcast does not imply an endorsement of them or any entity they represent. Views and opinions expressed by N-able employees are those of the employees and do not necessarily reflect the view of N-able or its officers and directors. The podcast may also contain forward-looking statements regarding future product plans, functionality, or development efforts that should not be interpreted as a commitment from N-able related to any deliverables or timeframe. All content is based on information available at the time of recording, and N-able has no obligation to update any forward-looking statements. https://www.n-able.com

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related