An Exchange mail server that has stopped receiving patches isn’t “a slightly old server”: it’s an open door with your name written on it. The older versions of Exchange Server (2016 and 2019) have reached end of support, and that means one very specific thing: Microsoft no longer publishes security updates for them. The next serious vulnerability that turns up won’t be patched. And on a mail server, they do turn up.
The good news is that getting out of there doesn’t have to hurt. Most SMEs come out ahead by moving their email to the managed cloud, and it can be done without losing a single email and without any downtime. This guide explains why it’s urgent, what your real options are and how to migrate without your team noticing a thing. At the end we tell you how we do it.
Why an unsupported mail server is a serious problem
Email is the most exposed system your company has: it’s published on the internet 24 hours a day, seven days a week, waiting for connections from anyone. When Microsoft stops supporting a version, it stops plugging the holes that keep being discovered. An unsupported mail server piles up known flaws that nobody is ever going to fix, and attackers hunt for them there precisely because they know plenty of companies are still running the old version “because it works”.
The risk isn’t theoretical, and it has three faces that cost real money:
- Security: Exchange has been one of the favourite targets for attacks in recent years. An unpatched server is the perfect way in for ransomware, data theft or full control of your corporate email.
- Reputation and spam: if they compromise your server, it starts sending spam in your name. Your domain ends up on blacklists and, all of a sudden, your legitimate emails bounce or land in your clients’ spam folder. Rebuilding a domain’s reputation takes weeks.
- Downtime: the day that server goes down —because of an encryption attack or a fault with no fix— your company is left with no email. And with no email you can’t invoice, look after clients or coordinate the team.
And one factor almost nobody looks at: compliance. Keeping personal data on a system you know to be insecure is hard to justify under the GDPR if there’s a breach. “It was doing the job” is not a defence.
Your options: Microsoft 365, another managed email service or an updated in-house server
There’s no single right answer for everyone, but there is one that fits the vast majority of SMEs. These are the three real ways out, with the criteria to choose between them.
1. Migrate your email to Microsoft 365 (the option that wins almost every time)
Moving to Microsoft 365 means no longer having a physical mail server to maintain, patch and watch over. The mailbox lives in Microsoft’s cloud, updates itself, comes with built-in security (MFA, anti-spam, cloud backup) and is paid for with a predictable per-user fee. For a company coming from on-premise Exchange, the change for the user is minimal: Outlook is still Outlook. What disappears is the infrastructure that breaks on a Friday afternoon. For most SMEs, this is the sensible call.
2. Another managed cloud email service
If your company doesn’t live inside the Microsoft ecosystem or you’re after something lighter, there are professional managed email platforms that also take the in-house server out of the equation. They cover email with your own domain, shared mailboxes, anti-spam and backup. It makes sense when you don’t need Teams, SharePoint or desktop Office and you just want solid email, nothing more. The key point is the same: that someone manages it and keeps it secure for you, rather than setting up another unwatched server.
3. Keep your own server, but up to date
Keeping Exchange in-house only makes sense in very specific cases: regulatory requirements that force you to keep email within your own premises, or legacy integrations that can’t be moved. And even then, the condition is non-negotiable: a supported version, patched and up to date and monitored. Staying on an unsupported version “to save money” isn’t saving: it’s putting off a much bigger bill.
What’s at stake for your company in an email migration
Email isn’t just the new messages coming in. It’s years of relationship history with your clients, and plenty of people use it as their working archive. A botched migration doesn’t “lose a couple of emails”: it can lose contracts, quotes you sent, legal conversations or the one place that attachment you now need was stored. That’s why an email migration is judged by what does not get lost.
What has to be carried across in full, without a single gap:
- Complete mailboxes: all the email, with its folder structure exactly as it is, not a jumbled dump.
- History, contacts and calendars: years of correspondence, the contacts address book and the future meetings already booked in.
- Rules, signatures and auto-replies: the filters each person had set up and the corporate signatures, so nobody has to redo them by hand.
- Distribution lists and shared mailboxes: the “info@”, the “accounts@” and the internal lists the whole team relies on.
- Service continuity: throughout the entire process, the company keeps sending and receiving. No “no email today” window.
An email migration is judged by what the user does not notice. If on Monday nobody asks where their history has gone, it went well.
How to migrate with no downtime
The golden rule is easy to state and hard to pull off: the new mailbox is filled before email is redirected to it, never the other way round. That way, on switchover day, everyone already has their history waiting for them. The process that works, in phases:
- Coexistence: the old system and the new one run side by side for a few days. Email keeps arriving in Exchange while the destination is prepared and a prior backup is made.
- Batch migration: mailboxes are copied in the background, in groups, without touching the email in production. The team keeps working like any other day while the destination fills up.
- Final sync: just before the cutover, only the emails from the last few hours are copied, so the new mailbox is up to the minute.
- MX switch: the domain’s MX record is pointed at the new email service, in a low-traffic window (Friday evening or the weekend). From then on, new email arrives in the cloud.
- Verification: we check that email arrives and goes out, that SPF, DKIM and DMARC are right (so you don’t land in spam), that the printers and applications that send email still work, and that nobody has been left stranded.
The old Exchange server is not switched off on the same day: it’s kept alive for a few days, collecting any email that still comes in while DNS propagates. There’s always a mailbox listening, so no email falls through the cracks. Once everything is verified and stable, the old server is retired safely.
The MagicBoxDesk offer: your email migration, managed end to end
At MagicBoxDesk we take your email off the unsupported server and move it to the cloud anywhere in Spain, with one non-negotiable principle: the business doesn’t stop and not a single email is lost. We do it as a managed migration on a fixed-scope project —you know the scope and the cost upfront, no surprises— and, if you want, we stay on afterwards as your managed business email and your outsourced IT department. It’s part of our infrastructure and cloud services, with cybersecurity included from day one.
What the service includes:
- An upfront audit of your current Exchange and the choice of destination (Microsoft 365 or another managed email service) based on your real situation.
- Prior backup and batch migration with coexistence: mailboxes, history, contacts, calendars, rules, signatures, lists and shared mailboxes.
- MX switch and SPF, DKIM and DMARC configuration so your email gets through and doesn’t land in spam.
- Built-in security: MFA for everyone, access policies and safe retirement of the old server.
- Team training and ongoing support on a monthly fee with no surprises if you choose to have us keep managing your email.
What you gain is what matters: zero downtime, zero lost emails and email that is no longer a security risk, but a tool that works. You stop watching patches and praying that the server holds out.
If you’re still running an unsupported Exchange, every week that goes by is a week of free exposure for attackers. Let’s sort it out before it becomes an emergency. Ask for a no-obligation quote and we’ll plan your email migration without stopping the business.
