EmailWorkspaceMigration&DomainOperations
Microsoft 365 | Google Workspace | SPF · DKIM · DMARC
Moving from legacy on-premise email servers or low-cost cPanel hosting to enterprise-grade cloud workspaces. We handle the entire migration — tenant administration, mailbox and domain configuration, DNS and authentication setup, and documented admin handover — so every email, calendar event, and contact lands where it should.
Request Consultation
Technologies in use
When this service becomes urgent
912 handles email and workspace migrations with a zero-downtime mindset: mailbox inventory, DNS readiness, SPF/DKIM/DMARC, staged migration, user support, and Monday-morning training.
Discovery call agenda
Mailbox and DNS audit, migration plan, staged sync, cutover, deliverability checks, user training, and support window.
- 1Inventory mailboxes, domains, and DNS state.
- 2Confirm cutover tolerance and training needs.
- 3Plan migration weekend and support window.
What the numbers say about leaving this alone
Email migration is judged entirely on the Monday after. Everything that makes that Monday uneventful is decided in the fortnight before it.
Kenya’s Data Protection Act 2019 governs transfers of personal data outside Kenya, including mailbox migrations to services hosted in another country.
Kenya Law(opens in a new tab) — statute, not a statistic
More than half (57%) of the respondents to Uptime's 2025 annual survey say their most recent major outage cost more than $100,000.
What the Migration Covers
Microsoft 365 Migration
- Exchange Online configuration
- SharePoint & OneDrive setup
- Teams integration
- Tenant administration handover
Google Workspace
- Gmail & Drive migration
- Google Vault retention policies
- Mobile Device Management (MDM)
- Admin role delegation
Domain & Mail Authentication
- DNS record audit and update
- SPF/DKIM/DMARC configuration
- Domain management handover
- Anti-phishing and MFA enforcement
What This Prevents
Lost emails, broken calendar attachments, and orphaned distribution lists during cutover.
Extended downtime that interrupts customer communications and breaks SLAs.
Failure to configure SPF, DKIM, and DMARC — the single most common cause of mail going to spam after migration.
Weak default security settings that leave organisations exposed to phishing in week one.
Honest Risk Framing
What this protects against — and what it doesn't.
Deliverability depends on SPF/DKIM/DMARC and domain history
We configure mail authentication properly at cutover, but a domain with a history of spam or unverified senders may still see deliverability issues for weeks. Sender-reputation rebuilds are gradual and outside any single migration engagement.
Microsoft and Google licensing is client-side
Migration scope covers the technical move and tenant configuration. M365 and Google Workspace subscriptions sit between you and the vendor — 912 can broker but the licensing contract is yours.
Email archive imports have format constraints
Historical archives in proprietary formats (legacy Lotus, Zimbra exports, raw mbox files of unusual structure) may require additional conversion tooling beyond the standard migration scope. We scope archive complexity in the pre-migration audit.
The Zero-Downtime Migration Process
A methodical approach to ensure business continuity.
Part of the 912 six-phase engagement model — this is how it runs for this service.
Pre-Migration Audit
Mapping mailboxes, aliases, distribution lists, and storage requirements.
Background Sync
Syncing historical data in the background without affecting current operations.
Weekend Cutover
Flipping DNS/MX records over the weekend and syncing the final delta.
Go-Live Support
On-site and remote support on Monday morning to ensure seamless user adoption.
Why Trust 912?
Turnkey Execution
We handle licensing, provisioning, migration, and training.
Security First
We configure advanced threat protection, spam filtering, and MFA before you ever log in.
From the Reference Migration
A modern, secure foundation — delivered the boring, reliable way.
Microsoft 365
Technology in scope
Google Workspace
Technology in scope
Mimecast
Technology in scope
Common Questions
Everything you need to know about Email Workspace Migration & Domain Operations.
How long does a Microsoft 365 or Google Workspace migration take?
912's delivered playbook: mailbox and distribution-list audit first, then a background sync of historical mail that runs while everyone keeps working on the old system, then a weekend DNS cutover — with support standing by on Monday morning when the questions actually arrive. The background-sync window scales with data volume: our reference migration moved 227 GB of mailbox data this way, with users switching over a weekend.
How much does migration cost?
Scope is driven by mailbox count, total data volume, and how much domain/DNS work the cutover needs — which the mailbox audit establishes precisely. Licensing for Microsoft 365 or Google Workspace is a separate, ongoing subscription between you and the vendor. The discovery call plus audit produces a fixed-price quote with migration, security baseline, and post-cutover support itemised.
Will my old emails be preserved?
Yes — full mailbox history including folders, contacts, calendars, and shared mailboxes is migrated. We also preserve metadata (sent dates, read state, attachments) so post-migration searches work the same way. Compliance archives are migrated separately on a documented schedule.
What security gets configured before go-live?
Before any user is migrated we enforce MFA on all admin accounts, deploy Conditional Access policies for risky sign-ins, configure DKIM/SPF/DMARC at the domain level, enable Microsoft Defender for Office 365 (or Google equivalent) for phishing protection, and set up audit logging with 12-month retention. Every migration ships with a security baseline document.
Can we keep our existing email addresses?
Yes — your domain (e.g., @yourcompany.co.ke) moves with you. The cutover is a DNS update, not an address change. We coordinate the MX/SPF/DKIM record changes during a low-traffic window to minimise disruption.
Do you handle the licensing and tenant administration?
Yes — 912 handles tenant setup, licence provisioning, and ongoing tenant administration, and hands over documented admin access at the end: the tenant is yours, with no admin lock-in. The subscription contract itself sits between you and Microsoft or Google; we make sure the licence mix matches how your team actually works before you commit to it.
Related Technical Protocol
Architecting the 'Strangler Fig': Modernizing Legacy Logistics ERPs for East African Trade
Custom software fails rapidly when legacy cores can't handle modern API loads. Discover the microservice bridging strategy for SAP ECC and localized ERPs.
From Silos to Insights: Architecting Enterprise Data Lakehouses for Regional Power BI Visibility
Disparate data causes reporting lag in multi-branch operations. Discover the Data Engineering architecture required for real-time BI in East Africa.
Migrating Legacy SAP: Avoiding the Integration Trap with ERP Software in Kenya
Enterprise resource planning deployments notoriously overrun budgets. How to utilize API gateways for seamless ERP integration in manufacturing.