Office 365 Migration Plan: The Phase-by-Phase Template


Every failed migration we've been called in to rescue had the same root cause: no plan, or a plan that was really just a date on a calendar. This is the actual project plan we run — five phases, each with tasks, owners, durations, and exit criteria you must hit before moving to the next phase. Copy the tables, put names in the owner column, and you have a working Office 365 migration project plan. Pair it with our Microsoft 365 migration checklist, which covers the item-level detail inside each phase.
Phase 1 — Discovery & Assessment (1–3 days)
You cannot migrate what you haven't counted. Phase 1 produces the inventory every later decision depends on: how many mailboxes, how much data, what talks to your mail server that isn't a human.
| Task | Owner | Duration | Exit criteria |
|---|---|---|---|
| Mailbox inventory — user, shared, room, and resource mailboxes with sizes | Migration engineer | 0.5 day | Spreadsheet with every mailbox, size in GB, and type; total data volume calculated |
| PST hunt — scan file shares, desktops, and laptops for local archives | IT admin | 1 day | PST count and total size known; decision made per PST: import, archive, or leave |
| License SKU audit — map each user to Business Basic/Standard/Premium or E3/E5 | Project lead | 0.5 day | License plan signed off; cost approved by budget owner |
| Dependency map — every app, device, and service that sends or receives email | Migration engineer + IT admin | 1 day | Written list of MFPs/scanners, backup alerts, monitoring, CRM, ERP, website forms, and any app relaying SMTP — each with its cutover fix |
| Define success criteria | Project lead + business owner | 0.5 day | Written statement: what "done" means, acceptable downtime window, rollback trigger |
What goes wrong in Phase 1: the dependency map gets skipped because "it's just email." Then Monday morning after cutover, the scan-to-email on every copier is dead, invoices from the ERP stop going out, and the backup system has been silently failing to alert for two days. Those devices were relaying through the old server; nobody put them on the list. Walk the office. Look at every device with an Ethernet port. Ask accounting what emails them automatically. This one day of work prevents 80% of day-one tickets.
Phase 2 — Tenant Preparation (1–2 days)
Build the destination completely before a single message moves. A half-configured tenant discovered mid-migration is how weekends get lost.
| Task | Owner | Duration | Exit criteria |
|---|---|---|---|
| Create tenant, add and verify all custom domains | Migration engineer | 2 hrs | Every domain shows Verified in the admin center |
| Provision users — manual, CSV bulk, or Entra Connect sync from AD | Migration engineer | 2–4 hrs | Every mailbox from the Phase 1 inventory has a matching user or shared mailbox |
| Assign licenses per the Phase 1 SKU plan | IT admin | 1 hr | Zero unlicensed users; zero surplus licenses burning budget |
| Security baseline — enforce MFA, deploy Conditional Access, disable legacy authentication | Migration engineer | 3–4 hrs | MFA registration required for all users; legacy auth blocked except documented Phase 1 exceptions (SMTP devices) |
| Stage DNS — prepare MX, SPF, DKIM, DMARC, Autodiscover records; drop TTL to 300 seconds | IT admin | 1 hr | All records written and reviewed; TTL lowered at least 48 hrs before cutover |
What goes wrong in Phase 2: two things, repeatedly. First, the security baseline gets deferred "until after migration" — and after never comes; you've now migrated everyone into a tenant with no MFA and basic auth wide open. Do it before users arrive, when there's nobody to disrupt. Second, nobody lowers DNS TTL in advance. If your MX record has a 24-hour TTL and you flip it Saturday night, some mail servers keep delivering to the old system into Monday. Drop TTL to 300 seconds two days early and cutover propagates in minutes.
Phase 3 — Pilot (2–3 days)
Migrate 10–20 real users before you migrate everyone. Not the IT team — they tolerate broken things. Pick people across departments: one from finance with delegate access to a shared mailbox, one heavy calendar user, one road warrior on mobile, one person who lives in a distribution list.
| Task | Owner | Duration | Exit criteria |
|---|---|---|---|
| Select pilot group — 10–20 users covering delegates, shared mailboxes, mobile, and heavy calendar use | Project lead | 0.5 day | Pilot list approved; users notified |
| Migrate pilot mailboxes and reconfigure their Outlook + mobile | Migration engineer | 1 day | All pilot mailboxes migrated with item counts matching source |
| Validate mail flow, calendar entries, delegate/shared access, mobile sync | Migration engineer + pilot users | 1 day | Every pilot user confirms in writing: mail sends/receives, calendar intact, delegates work, phone syncs |
| Fix everything the pilot surfaced; update the runbook | Migration engineer | 0.5–1 day | Zero open pilot defects; runbook amended with each fix |
| GO/NO-GO decision | Project lead + business owner | 1 hr | Written GO with cutover date, or NO-GO with a fix list and new pilot date |
What goes wrong in Phase 3: the pilot passes because it was too easy. Ten IT-adjacent users with clean 2 GB mailboxes and no delegate permissions prove nothing. The failures live in the edges — the executive assistant managing three calendars, the 40 GB mailbox, the shared mailbox with 14 people attached. Put the hard cases in the pilot. A pilot that finds nothing wrong is a pilot that was designed not to look.
Phase 4 — Batched Migration & Cutover (the long pole)
This phase's duration is set by physics: data volume divided by real-world transfer rates, which are throttled by the source system, not by your bandwidth. The strategy that makes cutover weekend boring is pre-staging — copy 95% of the data while users keep working on the old system, then move only the delta at cutover.
| Task | Owner | Duration | Exit criteria |
|---|---|---|---|
| Pre-stage historical data — initial sync of all mailboxes in batches of 25–50 | Migration engineer | 1–4 weeks (volume-dependent) | 95%+ of total data copied; per-mailbox sync status green |
| Run delta syncs daily until cutover | Migration engineer | 15–60 min/day | Each delta completes in under an hour — proof the final delta will fit the window |
| Cutover: flip MX + Autodiscover, final delta sync, complete batches | Migration engineer | 2–4 hr window (weekend) | MX resolves to Microsoft 365; final delta complete; test messages flow both directions |
| Rollback plan — signed off before the window opens | Project lead | Prepared in advance | Written procedure: revert MX, re-point clients, decision deadline (e.g., 2 hours into window) and who calls it |
| Validation — item counts per mailbox; SHA-256 hashes on any file-level data (PST imports, exported archives) | Migration engineer | 2–4 hrs | Source vs. destination counts match within tolerance; hash verification passes on file transfers; discrepancies documented |
What goes wrong in Phase 4: teams skip pre-staging and try to move everything in the cutover window. A 500 GB migration does not fit in a weekend when the source throttles exports — the window blows, Monday arrives mid-copy, and now you're running two mail systems with users split across both. The second failure is a rollback plan that exists only as the sentence "we'll roll back if needed." A rollback you haven't written down, with a decision deadline and a named decision-maker, is not a plan — it's a hope. Sign it off before Saturday.
Phase 5 — Hypercare & Decommission (30 days)
The project isn't done when the data lands. It's done when users stop noticing anything changed and the old system is safely gone.
| Task | Owner | Duration | Exit criteria |
|---|---|---|---|
| Morning-after support — engineer on-site or on a dedicated channel from 7 a.m. Monday | Migration engineer | Days 1–3 | All day-one tickets resolved same day; ticket volume trending to baseline |
| Autodiscover and mobile fixes — stale Outlook profiles, phones still pointing at the old server | IT admin | Week 1 | Every user confirmed on the new profile; zero clients touching the old server |
| User training — 30-minute sessions: what moved, what changed, where things live now | Project lead | Week 1–2 | All departments trained; one-page reference distributed |
| Monitor mail flow, delivery reports, and sign-in logs for stragglers | Migration engineer | Weeks 1–4 | No mail arriving at the old system for 14 consecutive days |
| Staged decommission — old server to read-only, then off, then final backup retained, then license/hardware retired | IT admin | Day 30+ | Source system powered off 30 days with zero incidents; final backup verified and stored |
What goes wrong in Phase 5: decommissioning too fast — the old server gets wiped on day 3, and on day 9 someone discovers a public folder or a forgotten application mailbox that never made the inventory. Keep the source in read-only for 30 days minimum. The opposite failure is never decommissioning: the old server runs for two years "just in case," unpatched, still accepting connections. Both are avoidable — put the decommission dates in the plan now, in Phase 1, and hold them.
Adapting the plan by size
| Org size | Timeline | What changes |
|---|---|---|
| ~10 users | 1–2 weeks total | Compress Phases 1–2 into two days. Pilot can be 2–3 users. Single migration batch, one-evening cutover. One person can own everything, but still write the dependency map — a 10-user office has the same copiers. |
| ~100 users | 4–6 weeks total | Run the plan as written. Pre-stage 2–3 weeks. Batch by department, migrate departments that email each other heavily in the same batch. Dedicated pilot with a real GO/NO-GO meeting. |
| ~500 users | 8–12 weeks total | Add a project manager separate from the engineer. Multiple cutover waves (by site or business unit), each with its own delta-sync schedule and validation. Formal comms plan with T-14/T-7/T-1 user emails. Hypercare staffed as a rota, not one person. |
RACI — who does what
| Activity | Migration engineer | IT admin | Project lead | Business owner |
|---|---|---|---|---|
| Inventory & dependency map | R | C | A | I |
| Tenant build & security baseline | R | C | A | I |
| GO/NO-GO decision | C | C | R | A |
| Cutover execution | R | C | A | I |
| Rollback call | C | I | R | A |
| Decommission sign-off | C | R | A | I |
R = responsible (does the work), A = accountable (owns the outcome), C = consulted, I = informed. In a 10-user shop one person holds three columns — the point is that every row still has an A, so no decision floats ownerless.
The template
The five tables above are the template. Copy them into a spreadsheet, replace the owner roles with names, replace the duration ranges with dates, and add a status column (Not started / In progress / Blocked / Done). That's a working migration plan — the exit criteria columns are your phase gates, and a phase isn't done until every row in it passes. For the item-level detail behind each row, use the migration checklist alongside it; for execution technique, see our Office 365 migration best practices.
Start with essential cloud services — email, file storage, and Teams at an affordable price.
Compare Business Basic FeaturesTopics

Sreenivasa Reddy G
Founder & CEO • 15+ years
Sreenivasa Reddy is the Founder and CEO of Medha Cloud, recognized as "Startup of the Year 2024" by The CEO Magazine. With over 15 years of experience in cloud infrastructure and IT services, he leads the company's vision to deliver enterprise-grade cloud solutions to businesses worldwide.
More in Microsoft 365
View all
Office 365 Migration Downtime: Will Your Email Go Down?
9 min read

Office 365 Migration Best Practices: 1.4M Users Later
11 min read

How Long Does Office 365 Migration Take? Real Timelines
9 min read

Office 365 Migration Cost: What You Actually Pay in 2026
11 min read

Cutover Migration vs Staged vs Hybrid: How to Choose
9 min read

SharePoint Migration: Sites, Files & Permissions Done Right
11 min read