Microsoft 365 Backup
Common Use Cases
- Ransomware recovery: roll sites and accounts back to a clean state
- Accidental deletion: restore content a user removed by mistake
- Malicious insider: recover from intentional data destruction
- Business continuity: meet recovery objectives without third-party tools
- Departed employee data: protect OneDrive and mailbox content
- Rapid mass restore: recover many sites quickly after an incident
How It Works
- Three workloads: protects SharePoint, OneDrive, and Exchange Online
- Frequent restore points: every ten minutes for the prior two weeks
- Weekly snapshots: kept from two to fifty-two weeks back
- One-year retention: protected data is retained for twelve months
- Point-in-time rollback: restore a whole site or account to a prior state
- Same or new URL: restore in place or to a new location
Benefits
- Fast restore: one to three terabytes per hour at scale
- Stays in boundary: data never leaves the Microsoft 365 trust boundary
- Immutable backups: append-only storage resists malicious overwrites
- Free restores: you pay for protection, not for recovering
- Native management: run it from the Microsoft 365 admin center
- Honors residency: backups respect your geographic data residency
Details
- Feature Category: Governance & Compliance
Billing and Setup
- Pay-as-you-go: consumption-based, not a per-user license
- Per-gigabyte rate: a published monthly rate for all protected data
- Protection policies: choose all or selected sites, accounts, and mailboxes
- PowerShell support: automate through the Backup Storage Graph APIs
- Partner apps: independent vendors build on the same platform
- 90-day grace: offboarded backups are recoverable for ninety days
Limits and Nuances
- Not infinite history: retention is one year, not permanent
- Workload scope: it covers SharePoint, OneDrive, and Exchange only
- Billing setup needed: pay-as-you-go requires an Azure billing link
- Restore, not archive: it is for recovery, not long-term cold storage
- Initial backup time: policies take time to create their first restore points
- Deletion allowed: backups can be offboarded, unlike strict immutability
Common Questions About Microsoft 365 Backup
What is Microsoft 365 Backup?
Microsoft 365 Backup is a native Microsoft service that backs up SharePoint sites, OneDrive accounts, and Exchange Online mailboxes and restores them quickly. Its purpose is recovery: after ransomware or an accidental or malicious deletion, you can roll an affected site or account back to a healthy earlier state. Backups stay within the Microsoft 365 trust boundary, so your data never leaves Microsoft’s environment for a third-party vault.
How far back can Microsoft 365 Backup restore?
It keeps recovery points every ten minutes for the previous two weeks, then weekly snapshots from two to fifty-two weeks back, with a total retention of one year. That gives fine-grained recovery for recent changes and broader checkpoints further back. Retention is one year rather than permanent, so Backup is built for recovering from incidents, not for indefinite archival of content.
How fast is a restore?
Restores run at roughly one to three terabytes per hour and can cover up to a thousand sites, OneDrive accounts, or mailboxes, with in-place restores to the same URL generally fastest. A small single site can come back in under twenty minutes using a recommended express restore point. The speed matters most in a large ransomware event, where getting back to a healthy state quickly is the whole point.
How is Microsoft 365 Backup billed?
It is pay-as-you-go rather than a per-user license, charged at a published rate per gigabyte per month for all protected data, and restores themselves are free. Billing is consumption-based and tied to your Azure subscription. Because you pay for the volume you protect, you can scope protection policies to all sites and accounts or only the most critical ones to manage cost.
How is Backup different from the Recycle Bin or Version History?
The Recycle Bin and Version History help with small, recent mistakes – a deleted file or an unwanted edit – but they are limited in time and scope and can be wiped in a large attack. Microsoft 365 Backup protects entire sites, accounts, and mailboxes on immutable, append-only storage with a year of retention, designed to recover from tenant-wide ransomware or mass deletion that ordinary recovery tools cannot.
When should I bring in help with backup and recovery?
Backup is reassuring, but it is one layer of a wider data protection and governance plan, not the whole thing. Greg Zelfond, the consultant behind LookBook 365, helps organizations combine versioning, retention, archive, and backup so each does the job it is best at without overpaying. If you are unsure whether your SharePoint content is genuinely protected against a serious incident, that is exactly the review he provides.