Exchange to Online Migration Center¶

The definitive resource for migrating from Exchange Server on-premises to Exchange Online, with Microsoft Purview integration for unified compliance and CSA-in-a-Box analytics.

Who this is for¶

This migration center serves Exchange administrators, M365 architects, IT managers, federal CIOs, and compliance officers who are planning or executing a migration from Exchange Server (2013, 2016, 2019) to Exchange Online. Whether you are responding to a security mandate after Hafnium/ProxyShell, consolidating messaging onto Microsoft 365, enabling Copilot for Outlook and Teams, or meeting FedRAMP/GCC-High/DoD compliance requirements, these resources provide the evidence, patterns, and step-by-step guidance to execute confidently.

Quick-start decision matrix¶

Migration path comparison¶

Choosing the right migration path is the most consequential decision in an Exchange Online migration. The wrong path creates weeks of unnecessary complexity; the right path compresses the timeline.

Decision tree¶

flowchart TD
    A[Exchange on-prem version?] --> B{Exchange 2003/2007?}
    B -->|Yes| C[Staged Migration]
    B -->|No| D{Mailbox count?}
    D -->|< 2,000| E{Need coexistence?}
    D -->|>= 2,000| F[Hybrid Migration]
    E -->|No| G[Cutover Migration]
    E -->|Yes| H{Long coexistence?}
    H -->|No| I[Express Hybrid / Minimal Hybrid]
    H -->|Yes| F
    F --> J{Federal tenant?}
    J -->|GCC| K[Hybrid + GCC endpoints]
    J -->|GCC-High/DoD| L[Hybrid + GCC-High endpoints]
    J -->|Commercial| F

Path comparison table¶

Strategic resources¶

These documents provide the business case, cost analysis, and strategic framing for decision-makers.

Migration guides¶

Domain-specific deep dives covering every aspect of an Exchange Online migration.

Tutorials¶

Step-by-step walkthroughs with PowerShell examples.

Technical references¶

Government and federal¶

How CSA-in-a-Box fits¶

CSA-in-a-Box is the analytics and governance destination that extends the value of an Exchange Online migration beyond messaging. Exchange Online migration connects to CSA-in-a-Box in three dimensions:

• Microsoft Purview as the unified compliance plane. When email moves to Exchange Online, Purview governs email, SharePoint, Teams, and the CSA-in-a-Box data platform through a single set of DLP policies, sensitivity labels, retention policies, and eDiscovery cases. The compliance silo between messaging and analytics disappears. CSA-in-a-Box ships Purview automation (csa_platform/csa_platform/governance/purview/) that extends email compliance into the data lake.

• Copilot for Microsoft 365. Exchange Online is a prerequisite for Copilot in Outlook and Teams. CSA-in-a-Box integrates Azure OpenAI and AI Foundry for the data platform; Copilot for M365 extends AI to email, calendar, and collaboration. Together, they deliver AI across the full organizational surface.

• Email analytics in the data lake. Exchange Online message trace logs, mail flow reports, and compliance audit logs can flow into the CSA-in-a-Box analytics estate via Azure Monitor, Event Hubs, or the Microsoft Graph API. This enables email governance dashboards in Power BI alongside data platform governance --- a single pane of glass for all organizational data.

• Infrastructure as Code. CSA-in-a-Box deploys via Bicep with FedRAMP High control mappings. Exchange Online configuration (transport rules, connectors, DLP policies) can be codified alongside the data platform using Exchange Online PowerShell and Microsoft Graph, ensuring consistent governance across the stack.

Migration timeline overview¶

gantt
    title Typical Exchange to Online Migration (20 weeks)
    dateFormat  YYYY-MM-DD
    section Discovery
    Environment assessment & inventory    :a1, 2026-01-05, 2w
    Identity & licensing readiness        :a2, after a1, 1w
    section Hybrid Setup
    Hybrid Configuration Wizard           :b1, after a2, 1w
    OAuth & mail routing configuration    :b2, after b1, 1w
    Free/busy & cross-premises testing    :b3, after b2, 1w
    section Pilot
    Pilot migration (50 users)            :c1, after b3, 2w
    Feedback & adjustment                 :c2, after c1, 1w
    section Production
    Batch migration wave 1                :d1, after c2, 2w
    Batch migration wave 2                :d2, after d1, 2w
    Batch migration wave 3                :d3, after d2, 2w
    Public folder migration               :d4, after d2, 2w
    section Cutover
    DNS cutover (MX, Autodiscover)        :e1, after d3, 1w
    Monitoring & validation               :e2, after e1, 2w
    Decommission on-prem Exchange         :e3, after e2, 2w

Prerequisites checklist¶

Before starting any migration path:

• Microsoft 365 tenant provisioned (commercial, GCC, GCC-High, or DoD).
• Microsoft Entra Connect deployed and synchronizing identities.
• UPN suffixes match verified domains in M365.
• Exchange on-premises at minimum supported CU (Exchange 2016 CU23+, 2019 CU14+).
• Outlook desktop clients at minimum Outlook 2016 (modern auth capable).
• Microsoft 365 licenses assigned to pilot users.
• Network connectivity validated to Exchange Online endpoints.
• DNS records documented (MX, Autodiscover, SPF, DKIM, DMARC).
• Third-party integrations inventoried (archiving, DLP, anti-spam gateways).
• Backup and rollback plan documented.

Related resources¶

• Migration index: docs/migrations/README.md
• Companion playbooks: SQL Server to Azure, VMware to Azure
• Microsoft Learn: Exchange Online migration methods
• FastTrack: FastTrack for Microsoft 365
• CSA-in-a-Box Purview modules: csa_platform/csa_platform/governance/purview/
• Compliance matrices: docs/compliance/nist-800-53-rev5.md, docs/compliance/cmmc-2.0-l2.md

Document map¶

docs/migrations/exchange-to-online.md          # Top-level playbook (you are here: Migration Center)
docs/migrations/exchange-to-online/
  index.md                                     # This hub page
  why-exchange-online.md                       # Executive brief
  tco-analysis.md                              # Total cost of ownership
  feature-mapping-complete.md                  # 50+ feature mapping
  hybrid-migration.md                          # Full hybrid deployment
  cutover-migration.md                         # Cutover migration (<2K)
  staged-migration.md                          # Staged migration (2003/2007)
  public-folder-migration.md                   # Public folder strategies
  compliance-migration.md                      # Compliance continuity
  security-migration.md                        # Security and mail flow
  tutorial-hybrid-setup.md                     # Tutorial: hybrid setup
  tutorial-mailbox-move.md                     # Tutorial: mailbox move
  federal-migration-guide.md                   # GCC/GCC-High/DoD
  benchmarks.md                                # Performance benchmarks
  best-practices.md                            # Migration best practices

Maintainers: csa-inabox core team Last updated: 2026-04-30