In this episode, N-able Head Nerd Eric Harless talks to Sales Engineer Will Linthicum about why native Microsoft 365 tools aren’t sufficient for business‑grade protection and why a dedicated backup strategy matters for MSPs and IT teams. The conversation covers the shared responsibility model, the common misconception that “Microsoft backs it all up,” and practical risks ranging from accidental deletion to insider threats and ransomware. They explore core workloads – Exchange, OneDrive, SharePoint and Teams – and unpack where advanced licencing and features (e.g., conditional access, litigation hold) start and stop. They walk through a real‑world scenario of a compromised mailbox, the importance of MFA and geolocation rules, and the subtle ways attackers use mail rules and PowerShell to quietly purge data beyond recycle bins.

Aligning data life‑cycles to compliance needs

The episode also addresses retention policies and offboarding: converting users to shared mailboxes, handling OneDrive content, and aligning data life‑cycles to compliance needs. Listeners hear candid guidance on what backup can and can’t do (it’s not DR or BC in itself), backup cadence and on‑demand snapshots, and known limitations like Information Rights Management and OneNote API access. Finally, the discussion touches on roadmap items such as online archive backup and PST restore, plus performance improvements to accelerate scans and handle throttling—placing emphasis on tabletop exercises and clear customer communication so MSPs sell continuity and peace of mind, not just “backup.”

Who Should Listen to This Podcast…

This podcast is essential listening for MSPs, IT solution providers, and corporate IT professionals responsible for safeguarding Microsoft 365 environments. Whether you’re an IT manager, systems administrator, or technical lead, you’ll gain practical insights into the realities of data protection, backup, and recovery in today’s threat landscape. The episode is particularly valuable for those navigating compliance requirements, managing user offboarding, or seeking to strengthen their organisation’s resilience against accidental deletion, insider threats, and ransomware. 

Topics covered

• The shared responsibility model for Microsoft 365 and why native tools aren’t enough
• Accidental deletion, insider threats and ransomware as everyday risks
• Practical mailbox compromise triage: MFA, geolocation and Defender visibility
• How attackers abuse mail rules, nested folders and PowerShell to purge data
• Retention “sweet spots” (1, 3, 5, 7 years) and long‑tail requirements
• Offboarding workflows: converting to shared mailboxes and managing OneDrive
• Backup cadence, on‑demand backups and limits of recycle bins/versioning
• What M365 backup is (point‑in‑time restore) vs. what DR/BC are

Disclaimer: This podcast provides educational information about issues that may be relevant to information technology service providers. Nothing in the podcast should be construed as any recommendation or endorsement by N-able, or as legal or any other advice. The views expressed by guests are their own and their appearance on the podcast does not imply an endorsement of them or any entity they represent. Views and opinions expressed by N-able employees are those of the employees and do not necessarily reflect the view of N-able or its officers and directors. The podcast may also contain forward-looking statements regarding future product plans, functionality, or development efforts that should not be interpreted as a commitment from N-able related to any deliverables or timeframe. All content is based on information available at the time of recording, and N-able has no obligation to update any forward-looking statements. https://www.n-able.com