TR EN RU
Book a Technical Call
Current mail system Identity and DNS Migration and testing Exchange

Exchange Email Service: Exchange Server and Exchange Online

We deploy, migrate and operate your business email on on-premises Exchange Server, on Exchange Online (Microsoft 365), or on a hybrid architecture that uses both.

Scope

Our Exchange email service covers both products: Exchange Server running on your premises and Exchange Online, part of Microsoft 365. New deployments, version upgrades, cloud migration, hybrid setups, email security, backup and day-to-day operations are handled in a single project plan.

Key Areas

  • Exchange Server SE deployment and upgrades from Exchange 2016/2019
  • Exchange Online licensing and mailbox migration
  • Staged, planned migration with hybrid Exchange
  • SPF, DKIM, DMARC and email threat protection
  • Mailbox backup, archiving and retention policies

Exchange Server or Exchange Online?

Both products deliver the same Outlook experience; the difference is who owns the infrastructure, who applies updates and how licensing is paid. The table below is a starting point for the first decision.

CriterionExchange Server (on-premises)Exchange OnlineHybrid
InfrastructureYour own servers or virtualization platformMicrosoft data centersBoth
Updates and patchingCUs and security updates are your responsibilityManaged by MicrosoftYour responsibility for on-premises servers
Data locationFull control in your own data centerMicrosoft data centers in the tenant regionChosen per mailbox
LicensingExchange Server SE server and CAL subscriptionPer-user subscription (Plan 1/Plan 2 or Microsoft 365 plans)A combination of both
Mailbox sizeDepends on your storage capacityPlan 1: 50 GB, Plan 2: 100 GB plus archiveDepends on where the mailbox lives
High availabilityDesigned with a Database Availability Group (DAG)Covered by Microsoft's service level commitmentEach side in its own model
Best fitOrganizations with data residency or compliance requirementsOrganizations that want to stop running mail serversOrganizations migrating in stages

Exchange Server (On-Premises) Deployment and Management

With on-premises Exchange, mailbox data stays in your infrastructure, and so does responsibility for servers, storage, updates and security. Deployment and operations cover:

  • Architecture and capacity: server, storage and database layout based on mailbox count, growth and retention needs.
  • High availability: Database Availability Group (DAG), load balancer and a single namespace design.
  • Certificates and DNS: correct certificates and DNS records for Autodiscover, OWA and Outlook connectivity.
  • Update management: cumulative updates (CUs) and security updates tested and applied in maintenance windows.
  • Security: Exchange is internet-facing and has been widely targeted through vulnerabilities such as ProxyLogon and ProxyShell. Current patches, Extended Protection, least privilege and monitoring are therefore critical.
  • Monitoring and capacity tracking: alerts for queues, databases, disks and certificate expiry.

Exchange 2016 and 2019 End of Support: Moving to Exchange Server SE

Microsoft ended support for Exchange Server 2016 and 2019 on October 14, 2025. Standard security updates are no longer released for these versions. The successor for on-premises Exchange is Exchange Server Subscription Edition (SE), generally available since July 1, 2025.

  • If you run Exchange 2019: SE RTM is code-equivalent to Exchange 2019 CU15. It can be installed in place, like a cumulative update, on servers running CU14 or CU15, with no Active Directory schema changes.
  • If you run Exchange 2016: there is no in-place upgrade. New servers are deployed, mailboxes are moved and the old servers are properly decommissioned (side-by-side migration).
  • Licensing: SE requires subscription-based server and CAL licenses or active Software Assurance.
  • Alternative: instead of renewing on-premises servers, a move to Exchange Online or a hybrid setup can also be evaluated.

Exchange Online Setup, Licensing and Management

In Exchange Online, servers, updates and hardware are Microsoft's responsibility; identity, licensing, security policies and user management remain on your side.

  • License selection: Exchange Online Plan 1 (50 GB), Plan 2 (100 GB, auto-expanding archiving, DLP) or Microsoft 365 Business and Enterprise plans that include Exchange, chosen per user profile.
  • Tenant and domain: domain verification, MX and Autodiscover records, identity model (cloud-only or synchronized with Entra Connect).
  • Mailbox types: user, shared, room and resource mailboxes, plus distribution lists and Microsoft 365 groups.
  • Protection: Exchange Online Protection (EOP) is included; Microsoft Defender for Office 365 is evaluated for advanced phishing and attachment protection.
  • Application compatibility: EWS is being blocked in Exchange Online in phases from October 1, 2026; applications that use EWS must move to Microsoft Graph.

Hybrid Exchange and Migration Methods to Exchange Online

The migration method is chosen based on mailbox count, the current Exchange version and how long the migration will run:

  • Cutover migration: in environments with few mailboxes, all mailboxes move at once.
  • Hybrid migration: the Hybrid Configuration Wizard connects on-premises Exchange and Exchange Online; calendar free/busy sharing is preserved and mailboxes move in waves.
  • IMAP or third-party tools: used for migrations from non-Exchange mail systems.

In every method, DNS TTL values are lowered in advance, pilot users test first and the MX record is switched last. In environments synchronized with on-premises Active Directory, Exchange management tools are still needed for recipient management after all mailboxes have moved. Old servers are properly decommissioned before they are shut down.

Email Security and Deliverability

Major mailbox providers require SPF, DKIM and DMARC alignment for bulk senders. A poorly configured domain stays open to spoofing and increases the chance that your own mail lands in spam.

  • SPF, DKIM, DMARC: DMARC starts in monitoring mode (p=none), then moves to quarantine and reject after reports are reviewed.
  • Identity security: MFA, conditional access and disabling legacy authentication methods.
  • Threat protection: phishing, malicious attachment and link scanning, with quarantine and reporting workflows.
  • Application and device sending: SMTP sending from printers, scanners and business applications is reconfigured with secure methods.

Backup and Archiving

In Exchange Online, Microsoft is responsible for service continuity; protection against deletion, user error or ransomware is your responsibility. Retention policies do not replace an independent backup. On premises, a DAG is not a backup method either.

Who Is This Service For?

Organizations whose Exchange 2016 or 2019 servers are out of support, organizations moving email to Microsoft 365, organizations that must keep on-premises Exchange for data residency, and businesses that want one corporate email platform across several locations.

Scope and Deliverables

  • Current mail system inventory: version, mailbox count and sizes, connected applications, DNS records.
  • Target architecture and migration method decision, licensing recommendation.
  • Deployment or migration, pilot testing and user migration schedule.
  • SPF, DKIM, DMARC and security policy implementation.
  • Backup configuration and restore test.
  • Administration documentation and operations handover.

Technical Approach

Before migrating, we list everything that depends on email: printers that scan to email, business applications using SMTP, integrations using EWS, shared mailboxes and mobile devices. What breaks during a migration is usually not the mailbox itself but one of these forgotten dependencies.

Example Scenario

A hypothetical organization runs Exchange 2016 at two locations and the servers are out of support. Most mailboxes move to Exchange Online through a hybrid migration; Exchange Server SE is deployed for a few mailboxes that must stay on premises for compliance. The MX record is switched after pilot tests and the old servers are properly decommissioned.

What Drives the Price

  • Mailbox count and total data volume
  • On-premises, cloud or hybrid choice
  • License model and security add-ons
  • Migration method and hybrid duration
  • Number of connected applications and integrations
  • Post-migration support model

Pre-Purchase Checklist

  • Do you know your current Exchange version and cumulative update level?
  • Are mailbox count, total size and archiving needs known?
  • Have printers, applications and integrations that send email been listed?
  • Is there a compliance requirement to keep data on premises?
  • Is it clear who has access to DNS management?
  • Do mailboxes have an independent backup?

Exchange Email Service FAQ

Should we choose Exchange Online or Exchange Server?

The decision depends on data residency and compliance requirements, existing hardware and operations staff, budget model (capital spend or subscription) and the applications that depend on email. Exchange Online suits organizations that do not want to run infrastructure, Exchange Server SE suits cases where data must stay on premises, and a hybrid setup suits staged migrations or keeping some mailboxes on premises.

What happens if we keep running Exchange 2016 or 2019?

Microsoft support for Exchange Server 2016 and 2019 ended on October 14, 2025, and standard security updates are no longer released for these versions. Because Exchange is an internet-facing service, an unpatched server is a serious risk. An upgrade to Exchange Server SE or a move to Exchange Online should be planned.

How do we move from Exchange 2019 to Exchange Server SE?

Exchange Server SE RTM is code-equivalent to Exchange 2019 CU15 and can be installed like a cumulative update on servers running Exchange 2019 CU14 or CU15, with no Active Directory schema changes. Exchange 2016 environments require a side-by-side migration, moving mailboxes to new servers.

Will we lose email or face downtime when moving to Exchange Online?

Mailboxes are copied with a hybrid or cutover migration, DNS TTL values are lowered in advance and the MX record is switched last. Because the migration runs in a planned window and is tested with pilot users first, user impact and downtime risk are kept to a minimum.

What is the difference between Exchange Online Plan 1 and Plan 2?

Plan 1 provides a 50 GB mailbox per user. Plan 2 provides a 100 GB mailbox, auto-expanding archiving and advanced compliance features such as data loss prevention (DLP). Exchange Online is also included in Microsoft 365 Business and Enterprise plans; current plan features are confirmed against Microsoft sources at the proposal stage.

Do we need a separate backup for Exchange Online?

Yes, it is recommended. Microsoft 365 follows a shared responsibility model; retention policies and the deleted items folder do not replace an independent backup. A solution such as Veeam Backup for Microsoft 365 backs mailboxes up to a separate location, and restores are tested.

Can we keep our existing domain?

Yes. The domain is verified and the MX, Autodiscover, SPF, DKIM and DMARC records are updated for the new setup. Users keep their email addresses.

Does the EWS change in Exchange Online affect us?

Applications that use Exchange Web Services (EWS), such as CRM, archiving, backup and older integrations, are being blocked in Exchange Online in phases starting October 1, 2026, with full retirement on April 1, 2027. These applications need to move to Microsoft Graph. EWS on on-premises Exchange Server is not affected.