Guides

Microsoft 365 Migration Checklist for a Business That Cannot Afford a Messy Cutover

A practical Microsoft 365 migration checklist covering identity, email, files, permissions, devices, DNS, security, testing, user communication, and post-cutover support.

Stephen PiechowskiAuthorOct 14, 2026PublishedOct 14, 2026Last reviewed9 minReading time
Apply This to My BusinessA managing partner reviews every inquiry.
Modern business workspace representing a Microsoft 365 cloud migration
SHORT ANSWER

Treat a Microsoft 365 migration as an identity, data, device, security, and user-change project, not merely an email move. Inventory what exists, define ownership and permissions, test representative users, stage the cutover, and verify the business workflows afterward.

Microsoft 365Cloud ApplicationsBusiness ITLaw Firms & Professional ServicesMembership Organizations

A Microsoft 365 migration is easy to underestimate because email is the most visible part.

The real project can include identity, devices, files, permissions, shared mailboxes, Teams, OneDrive, SharePoint, mobile access, DNS, security policies, and the habits employees built around the old environment.

Inventory the current environment

Before moving anything, document:

  • domains;
  • mailboxes;
  • aliases;
  • shared mailboxes;
  • distribution groups;
  • user accounts;
  • file shares;
  • cloud storage;
  • calendars;
  • devices;
  • mobile access;
  • existing Microsoft tenants;
  • third-party applications that send email.

Unknown dependencies create cutover surprises.

Clean identity before migration

Decide:

  • who is an active employee;
  • which accounts should be shared;
  • which accounts belong to former employees;
  • which addresses are aliases;
  • naming standards;
  • administrator roles;
  • recovery contacts.

A migration is a good time to stop carrying years of identity clutter into the new environment.

Plan files separately from email

File migration deserves its own design.

Determine whether data belongs in:

  • OneDrive;
  • SharePoint;
  • Teams;
  • another cloud platform;
  • an archive;
  • an application.

Do not copy an old shared drive into one giant SharePoint library and call the information architecture finished.

Review permissions

Old file systems often contain permissions nobody remembers assigning.

Ask:

  • who actually needs access;
  • what should be departmental;
  • what should be private;
  • what guests or outside parties require;
  • what should not be migrated at all.

Simpler permissions are easier to support.

Secure the tenant before the cutover

At minimum, review:

  • multi-factor authentication;
  • administrator accounts;
  • conditional access if licensed and appropriate;
  • legacy authentication;
  • mailbox forwarding;
  • device enrollment requirements;
  • external sharing.

Security policy should be intentional rather than added after the first suspicious login.

Test representative users

Do not test only an administrator.

Include users who represent different workflows:

  • heavy Outlook user;
  • mobile user;
  • executive;
  • shared mailbox user;
  • remote employee;
  • employee with large file access;
  • employee using third-party applications.

Testing should confirm the real work, not merely that the login succeeds.

Plan DNS and mail flow

Document which records will change and when.

Typical changes may include:

  • MX;
  • Autodiscover;
  • SPF;
  • DKIM;
  • DMARC;
  • verification records.

Also identify devices and applications that send email, such as scanners, websites, line-of-business software, and alerting systems.

Communicate the user experience

Employees need to know:

  • what changes;
  • when it changes;
  • what password or sign-in behavior to expect;
  • whether phones need to be reconfigured;
  • where files will be;
  • who to contact for help.

A technically successful migration can still feel chaotic if users are surprised.

Verify after cutover

Check:

  • inbound and outbound email;
  • aliases;
  • shared mailboxes;
  • calendars;
  • mobile devices;
  • file access;
  • Teams;
  • scanners/apps sending mail;
  • external sharing;
  • administrator access;
  • backup or retention plan.

Then monitor support patterns for several days.

The migration is complete when the business workflow works, not when the last mailbox reports 100 percent copied.

That is the mindset behind Loginect’s Infrastructure & Business IT and Data & Cloud Applications work.

THE ARTICLE IS GENERAL. YOUR ENVIRONMENT ISN'T.

Want to know what this means for your business?

Send us the situation, proposal, system, or problem you are looking at. You do not need to turn it into a technology diagnosis first.

Tell Us What's HappeningReviewed by a Loginect managing partner.

Related Loginect capabilities

When the article turns into an implementation decision.

General guidance only goes so far

Tell us what is happening in your environment.

The useful next step is usually understanding how this applies to the systems, people, economics, and operating reality of your business.

LOGINECTBusiness problem intake

Start a Loginect assessment

1What's going on?
2Tell us a little more
3How should we reach you?

Start here

What problem are you trying to solve?

Pick the closest category. You do not need to know what the technical solution is.

Choose the problem category

Not sure what fits? That's fine. Tell us what's happening and we'll help determine what actually makes sense.