MedhaCloud
Link copied to clipboard!
Microsoft 365

Office 365 Migration Plan: The Phase-by-Phase Template

Sreenivasa Reddy G
Sreenivasa Reddy G
Founder & CEO
Aug 1, 202611 min read
24
Office 365 Migration Plan: The Phase-by-Phase Template

Every failed migration we've been called in to rescue had the same root cause: no plan, or a plan that was really just a date on a calendar. This is the actual project plan we run — five phases, each with tasks, owners, durations, and exit criteria you must hit before moving to the next phase. Copy the tables, put names in the owner column, and you have a working Office 365 migration project plan. Pair it with our Microsoft 365 migration checklist, which covers the item-level detail inside each phase.

Phase 1 — Discovery & Assessment (1–3 days)

You cannot migrate what you haven't counted. Phase 1 produces the inventory every later decision depends on: how many mailboxes, how much data, what talks to your mail server that isn't a human.

TaskOwnerDurationExit criteria
Mailbox inventory — user, shared, room, and resource mailboxes with sizesMigration engineer0.5 daySpreadsheet with every mailbox, size in GB, and type; total data volume calculated
PST hunt — scan file shares, desktops, and laptops for local archivesIT admin1 dayPST count and total size known; decision made per PST: import, archive, or leave
License SKU audit — map each user to Business Basic/Standard/Premium or E3/E5Project lead0.5 dayLicense plan signed off; cost approved by budget owner
Dependency map — every app, device, and service that sends or receives emailMigration engineer + IT admin1 dayWritten list of MFPs/scanners, backup alerts, monitoring, CRM, ERP, website forms, and any app relaying SMTP — each with its cutover fix
Define success criteriaProject lead + business owner0.5 dayWritten statement: what "done" means, acceptable downtime window, rollback trigger

What goes wrong in Phase 1: the dependency map gets skipped because "it's just email." Then Monday morning after cutover, the scan-to-email on every copier is dead, invoices from the ERP stop going out, and the backup system has been silently failing to alert for two days. Those devices were relaying through the old server; nobody put them on the list. Walk the office. Look at every device with an Ethernet port. Ask accounting what emails them automatically. This one day of work prevents 80% of day-one tickets.

The classic day-one breakage: multifunction printers and line-of-business apps that send SMTP. They authenticate against the old server with legacy protocols, and Microsoft 365 blocks basic auth by default. Plan each one: SMTP AUTH with an app-specific setup, a connector, or a third-party relay. Decide in Phase 1, not at 8 a.m. Monday.

Phase 2 — Tenant Preparation (1–2 days)

Build the destination completely before a single message moves. A half-configured tenant discovered mid-migration is how weekends get lost.

TaskOwnerDurationExit criteria
Create tenant, add and verify all custom domainsMigration engineer2 hrsEvery domain shows Verified in the admin center
Provision users — manual, CSV bulk, or Entra Connect sync from ADMigration engineer2–4 hrsEvery mailbox from the Phase 1 inventory has a matching user or shared mailbox
Assign licenses per the Phase 1 SKU planIT admin1 hrZero unlicensed users; zero surplus licenses burning budget
Security baseline — enforce MFA, deploy Conditional Access, disable legacy authenticationMigration engineer3–4 hrsMFA registration required for all users; legacy auth blocked except documented Phase 1 exceptions (SMTP devices)
Stage DNS — prepare MX, SPF, DKIM, DMARC, Autodiscover records; drop TTL to 300 secondsIT admin1 hrAll records written and reviewed; TTL lowered at least 48 hrs before cutover

What goes wrong in Phase 2: two things, repeatedly. First, the security baseline gets deferred "until after migration" — and after never comes; you've now migrated everyone into a tenant with no MFA and basic auth wide open. Do it before users arrive, when there's nobody to disrupt. Second, nobody lowers DNS TTL in advance. If your MX record has a 24-hour TTL and you flip it Saturday night, some mail servers keep delivering to the old system into Monday. Drop TTL to 300 seconds two days early and cutover propagates in minutes.

Phase 3 — Pilot (2–3 days)

Migrate 10–20 real users before you migrate everyone. Not the IT team — they tolerate broken things. Pick people across departments: one from finance with delegate access to a shared mailbox, one heavy calendar user, one road warrior on mobile, one person who lives in a distribution list.

TaskOwnerDurationExit criteria
Select pilot group — 10–20 users covering delegates, shared mailboxes, mobile, and heavy calendar useProject lead0.5 dayPilot list approved; users notified
Migrate pilot mailboxes and reconfigure their Outlook + mobileMigration engineer1 dayAll pilot mailboxes migrated with item counts matching source
Validate mail flow, calendar entries, delegate/shared access, mobile syncMigration engineer + pilot users1 dayEvery pilot user confirms in writing: mail sends/receives, calendar intact, delegates work, phone syncs
Fix everything the pilot surfaced; update the runbookMigration engineer0.5–1 dayZero open pilot defects; runbook amended with each fix
GO/NO-GO decisionProject lead + business owner1 hrWritten GO with cutover date, or NO-GO with a fix list and new pilot date

What goes wrong in Phase 3: the pilot passes because it was too easy. Ten IT-adjacent users with clean 2 GB mailboxes and no delegate permissions prove nothing. The failures live in the edges — the executive assistant managing three calendars, the 40 GB mailbox, the shared mailbox with 14 people attached. Put the hard cases in the pilot. A pilot that finds nothing wrong is a pilot that was designed not to look.

The GO/NO-GO gate is not a formality. If the pilot surfaced problems you haven't fixed, the answer is NO-GO. Rescheduling a cutover costs a week. Cutting over on top of known defects costs the project.

Phase 4 — Batched Migration & Cutover (the long pole)

This phase's duration is set by physics: data volume divided by real-world transfer rates, which are throttled by the source system, not by your bandwidth. The strategy that makes cutover weekend boring is pre-staging — copy 95% of the data while users keep working on the old system, then move only the delta at cutover.

TaskOwnerDurationExit criteria
Pre-stage historical data — initial sync of all mailboxes in batches of 25–50Migration engineer1–4 weeks (volume-dependent)95%+ of total data copied; per-mailbox sync status green
Run delta syncs daily until cutoverMigration engineer15–60 min/dayEach delta completes in under an hour — proof the final delta will fit the window
Cutover: flip MX + Autodiscover, final delta sync, complete batchesMigration engineer2–4 hr window (weekend)MX resolves to Microsoft 365; final delta complete; test messages flow both directions
Rollback plan — signed off before the window opensProject leadPrepared in advanceWritten procedure: revert MX, re-point clients, decision deadline (e.g., 2 hours into window) and who calls it
Validation — item counts per mailbox; SHA-256 hashes on any file-level data (PST imports, exported archives)Migration engineer2–4 hrsSource vs. destination counts match within tolerance; hash verification passes on file transfers; discrepancies documented

What goes wrong in Phase 4: teams skip pre-staging and try to move everything in the cutover window. A 500 GB migration does not fit in a weekend when the source throttles exports — the window blows, Monday arrives mid-copy, and now you're running two mail systems with users split across both. The second failure is a rollback plan that exists only as the sentence "we'll roll back if needed." A rollback you haven't written down, with a decision deadline and a named decision-maker, is not a plan — it's a hope. Sign it off before Saturday.

Phase 5 — Hypercare & Decommission (30 days)

The project isn't done when the data lands. It's done when users stop noticing anything changed and the old system is safely gone.

TaskOwnerDurationExit criteria
Morning-after support — engineer on-site or on a dedicated channel from 7 a.m. MondayMigration engineerDays 1–3All day-one tickets resolved same day; ticket volume trending to baseline
Autodiscover and mobile fixes — stale Outlook profiles, phones still pointing at the old serverIT adminWeek 1Every user confirmed on the new profile; zero clients touching the old server
User training — 30-minute sessions: what moved, what changed, where things live nowProject leadWeek 1–2All departments trained; one-page reference distributed
Monitor mail flow, delivery reports, and sign-in logs for stragglersMigration engineerWeeks 1–4No mail arriving at the old system for 14 consecutive days
Staged decommission — old server to read-only, then off, then final backup retained, then license/hardware retiredIT adminDay 30+Source system powered off 30 days with zero incidents; final backup verified and stored

What goes wrong in Phase 5: decommissioning too fast — the old server gets wiped on day 3, and on day 9 someone discovers a public folder or a forgotten application mailbox that never made the inventory. Keep the source in read-only for 30 days minimum. The opposite failure is never decommissioning: the old server runs for two years "just in case," unpatched, still accepting connections. Both are avoidable — put the decommission dates in the plan now, in Phase 1, and hold them.

Adapting the plan by size

Org sizeTimelineWhat changes
~10 users1–2 weeks totalCompress Phases 1–2 into two days. Pilot can be 2–3 users. Single migration batch, one-evening cutover. One person can own everything, but still write the dependency map — a 10-user office has the same copiers.
~100 users4–6 weeks totalRun the plan as written. Pre-stage 2–3 weeks. Batch by department, migrate departments that email each other heavily in the same batch. Dedicated pilot with a real GO/NO-GO meeting.
~500 users8–12 weeks totalAdd a project manager separate from the engineer. Multiple cutover waves (by site or business unit), each with its own delta-sync schedule and validation. Formal comms plan with T-14/T-7/T-1 user emails. Hypercare staffed as a rota, not one person.

RACI — who does what

ActivityMigration engineerIT adminProject leadBusiness owner
Inventory & dependency mapRCAI
Tenant build & security baselineRCAI
GO/NO-GO decisionCCRA
Cutover executionRCAI
Rollback callCIRA
Decommission sign-offCRAI

R = responsible (does the work), A = accountable (owns the outcome), C = consulted, I = informed. In a 10-user shop one person holds three columns — the point is that every row still has an A, so no decision floats ownerless.

The template

The five tables above are the template. Copy them into a spreadsheet, replace the owner roles with names, replace the duration ranges with dates, and add a status column (Not started / In progress / Blocked / Done). That's a working migration plan — the exit criteria columns are your phase gates, and a phase isn't done until every row in it passes. For the item-level detail behind each row, use the migration checklist alongside it; for execution technique, see our Office 365 migration best practices.

Want the plan built for you? We build this exact plan — inventory, dependency map, batch schedule, cutover runbook — for your environment as part of every quote, free. That's how we scope Microsoft 365 migration services: 500+ migrations, zero-data-loss record. Get an instant estimate → or send us your user count and we'll return the plan with the number.

Start with essential cloud services — email, file storage, and Teams at an affordable price.

Compare Business Basic Features

Topics

office-365-migration-planmigration-project-planmicrosoft-365
Sreenivasa Reddy G
Written by

Sreenivasa Reddy G

Founder & CEO15+ years

Sreenivasa Reddy is the Founder and CEO of Medha Cloud, recognized as "Startup of the Year 2024" by The CEO Magazine. With over 15 years of experience in cloud infrastructure and IT services, he leads the company's vision to deliver enterprise-grade cloud solutions to businesses worldwide.

Managed IT SupportCloud InfrastructureDigital Transformation
Follow on LinkedIn

Need Expert Help?

Our certified cloud and IT engineers are ready to tackle your toughest challenges — from migrations to managed services.