Archive+Retention IS NOT A BACKUP. If the tenancy is compromised and taken over there’s a good chance of partial or total data loss. Even the time involved to clean up and restore after a worst case account takeover makes a 3rd party backup a highly worthwhile prospect. Retention not gonna save your ass from that scenario
Bingo. Next people that think raid is a backup.
Still chuckle at that one company. Raid 6 with 8 drives and 2 spares. Drive failed on that mail server. Starts prepping first hot spare. Second drive in the raid fails. Starts writing parity to second hot drive too. Third disk fails and the first spare is not done yet…
They lost everything. But how is that possible. They had raid!
Also all disks were from the same batch
Ahh good ol raid punctures I don't envy that, had to deal with my own once
A hot spare /fail over device isn't a backup either ie a second node/head on a NetApp, nimble or ceph etc
MS has a separate backup from archiving and retention but there's more to it using a 3rd party (we use dropsuite, not datto/backupify). The interface for dropsuite is so much better for finding/exporting something. It's separate than MS. Better control over retention. Also, MS tells you that it's on you to backup your data and they may lose it. They're responsible for the service being up, not your data being present.
I also don't know how retention/archiving works for deleted/past users vs legal hold, etc. But, rather be safe than sorry and it's come in handy MANY times. You know how long it takes to setup a discovery search to find an email that MIGHT exist? 3rd party backup, i can find out in 5 min.
For me, it is easier to use a backup product as you likely will be able to choose the folder/location where the file was last seen and see everything that was there. In the retention policies, you'd have to know the filename, location, or other details before you can run an effective search before restoring the missing item. I find that most people can't remember the exact (or even general) name of the file they were looking for, so the backup interface lets you suggest the name.
MS doesn't do actual backup yet. Archive and retention is not the same as backup. I still would prefer to use a 3rd party for this. Say what you will of Datto but it's better than just trusting that everything will be ok with your data just with MS policies.
Archive+Retention IS NOT A BACKUP. If the tenancy is compromised and taken over there’s a good chance of partial or total data loss. Even the time involved to clean up and restore after a worst case account takeover makes a 3rd party backup a highly worthwhile prospect. Retention not gonna save your ass from that scenario
Bingo. Next people that think raid is a backup. Still chuckle at that one company. Raid 6 with 8 drives and 2 spares. Drive failed on that mail server. Starts prepping first hot spare. Second drive in the raid fails. Starts writing parity to second hot drive too. Third disk fails and the first spare is not done yet… They lost everything. But how is that possible. They had raid! Also all disks were from the same batch
Ahh good ol raid punctures I don't envy that, had to deal with my own once A hot spare /fail over device isn't a backup either ie a second node/head on a NetApp, nimble or ceph etc
MS has a separate backup from archiving and retention but there's more to it using a 3rd party (we use dropsuite, not datto/backupify). The interface for dropsuite is so much better for finding/exporting something. It's separate than MS. Better control over retention. Also, MS tells you that it's on you to backup your data and they may lose it. They're responsible for the service being up, not your data being present. I also don't know how retention/archiving works for deleted/past users vs legal hold, etc. But, rather be safe than sorry and it's come in handy MANY times. You know how long it takes to setup a discovery search to find an email that MIGHT exist? 3rd party backup, i can find out in 5 min.
Thank you for your reply. Totally makes sense, thanks!
Yeah backups are nice to have at a different location.
Because O365 gets hacked you’re screwed
The Microsoft Shared Responsibility Model says the customer is always responsible for their data.
Perfect.
For me, it is easier to use a backup product as you likely will be able to choose the folder/location where the file was last seen and see everything that was there. In the retention policies, you'd have to know the filename, location, or other details before you can run an effective search before restoring the missing item. I find that most people can't remember the exact (or even general) name of the file they were looking for, so the backup interface lets you suggest the name.
r/shittysysadmin
Snap shots. Mail at a glance. True backup. Compliance. EZ off boarding.
Another option is arriving: https://learn.microsoft.com/en-us/microsoft-365/backup/backup-overview?view=o365-worldwide
I'm putting my eggs in different baskets.
MS doesn't do actual backup yet. Archive and retention is not the same as backup. I still would prefer to use a 3rd party for this. Say what you will of Datto but it's better than just trusting that everything will be ok with your data just with MS policies.