Exchange Online restore: folder vs item
Overview
Microsoft provides multiple restore paths with different granularity and retention dependencies.
Scenarios
- Deleted item in retention window: eDiscovery or recovery folder per license.
- Hard deleted mailbox: tenant retention + backup vendor.
Use backup vendor when
Label policies missing, or legal needs instant point restore for executive mail.
Practice
Quarterly test single mail item restore—not only mailbox-level smoke.
Billing
If restore is out-of-scope, quote T&M before starting hours burn.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...