Microsoft 365 migration, tenant hygiene and Copilot
We migrate from on-premises Exchange, tidy up tenant security, and check what data Copilot can reach. Where your group runs a central tenant, we can work as the local administrator under your IT team's rules. We also supply licences as a Microsoft CSP reseller.
From Exchange to Microsoft 365 with a hybrid migration
Microsoft support for Exchange Server 2019 ended on 14 October 2025, so on-premises mail servers are worth moving on a planned schedule. In a hybrid migration, mailboxes move in waves using remote moves, so the office does not have to be switched over in a single weekend.
The first wave is a small pilot group, whose experience feeds into the later waves. In the project we describe, decommissioning of the old server is still in progress after the mailbox migration.
Example: a 43-user accounting firm
Microsoft 365 migration
Exchange 2019 to Microsoft 365 via a hybrid migration, for a 43-user accounting firm
Starting point
The firm ran its email on an on-premises Exchange 2019 server that had fallen behind on updates. Microsoft support for the product ended on 14 October 2025, so the move needed to happen soon, without disrupting day-to-day work.
What we did
- Before the migration we installed the last cumulative update and security fix on the existing server, so it ran on the latest available patch level during the transition.
- We set up a full hybrid configuration and Entra Connect directory synchronisation between the on-premises environment and Microsoft 365.
- Mailboxes moved in waves using remote moves, after the archive PST files had been slimmed down.
In numbers
- users, 45 Microsoft 365 Business Standard licences
- 43
- of mailbox data, plus 6 GB of shared mailboxes
- approx. 622 GB
- of downtime for the pilot moves, with a “Perfect” data consistency score
- 41 s
- from the pilot to the last migration wave
- approx. 10 days
Outcome
All user mailboxes are in Exchange Online; decommissioning of the on-premises Exchange server is in progress.
Tenant hygiene
It is worth aligning tenant settings with what a professional office needs. We suggest reviewing these first; the IT audit checks all of them.
- Multi-factor authentication for every user, with stricter rules for admin accounts.
- Conditional access, so sign-ins can depend on location, device or risk.
- SPF, DKIM and DMARC, so spoofed mail sent in your domain's name can be filtered.
- External sharing, audit logging and retention, so you can see what leaves the organisation.
Copilot and AI data-handling audit
Price
HUF 120,000 + VAT
Standalone. HUF 60,000 + VAT when ordered with the IT audit.
If Copilot or other AI tools are already in use, it is worth seeing in writing what data reaches them and which rules apply. The audit consists of read-only queries and a written report; it does not change tenant settings. The raw scan data stays with you or on our encrypted device, and the report is produced from anonymised findings.
- Copilot usage over the past 180 days, by user and by file upload.
- The state of retention policies, retention labels and sensitivity labels.
- A manual check of the relevant portal settings.
- A report on open data-boundary risks and the points that need a management decision.
- Turnaround: TODO-KORNÉL.
Example: the shared tenant of an audit-firm group
Copilot data-handling audit
Copilot and AI data-handling audit in the shared Microsoft 365 tenant of an audit-firm group
Starting point
The member firms of the group share one Microsoft 365 tenant, where 13 users ran 3,662 Copilot interactions over 180 days and 9 users uploaded 178 files. The purpose was a read-only picture of data-boundary risks before policy work began.
What we did
- Using read-only Graph, Exchange and Purview queries only, we processed 180 days of Copilot usage.
- We also checked four portal settings by hand; no tenant setting was changed during the audit.
In numbers
- Copilot interactions by 13 users over 180 days
- 3,662
- file uploads by 9 users
- 178
- retention policies, retention labels and sensitivity labels
- 0 / 0 / 0
- decision points in the report
- 4
Outcome
A report on open data-boundary risks, used as the basis for drafting a policy.
Google Workspace and licensing
If you use Google Workspace, we can run its user and security settings too, and the IT audit covers it the same way. As a Microsoft CSP reseller we can supply Microsoft 365 licences, so licensing and operations can sit in one contract.
Where does your Microsoft 365 tenant stand today?
The free quick check covers the key tenant settings, and the Copilot audit can be requested with the same form.