Email remains the backbone of how most small businesses communicate, and behind a great deal of that email sits Microsoft Exchange. Yet for something so central to daily operations, Exchange is surprisingly poorly understood. Business owners often know they “have Microsoft” for email, without being clear on what Exchange actually is, which version they are running, or whether it is set up in a way that is secure, compliant, and fit for the way they work.
At help4IT, we manage Microsoft environments for small and medium-sized businesses across the UK, and Exchange is one of the first things we look at when we take on a new client. This guide explains what Microsoft Exchange is, the choices you face, and how to make sure your email platform is working for your business rather than against it.
What is Microsoft Exchange?
Microsoft Exchange is a mail and calendaring server. In plain terms, it is the system that receives, stores, and sends your business email, and that keeps everyone’s mailboxes, calendars, contacts, and shared resources synchronised across their laptops, phones, and web browsers.
It is what allows a colleague to see your availability before booking a meeting, lets a shared inbox such as accounts@ or info@ be monitored by several people, and ensures the email you send from your phone appears in your Sent items on your desktop. Without a system such as Exchange behind it, business email quickly becomes fragmented and unreliable.
There are two broad ways to run Exchange, and the difference matters.
Exchange Online versus Exchange Server
Exchange Online is the cloud-hosted version, delivered by Microsoft as part of a subscription. Microsoft runs the servers, applies the updates, and manages the underlying infrastructure, whilst you simply pay a monthly fee per user. For the overwhelming majority of small businesses, this is now the sensible default.
Exchange Server is the traditional, on-premises version, which you install and run on your own hardware, usually in a server cupboard or data centre. It gives you complete control over your environment, which a small number of organisations still require for regulatory or technical reasons, but that control comes at the cost of maintenance, patching, hardware, and the expertise needed to keep it secure.
Microsoft ended mainstream support for Exchange Server 2016 and Exchange Server 2019 on 14 October 2025, as set out in its end of support roadmap. Businesses still running those versions must now either move to the cloud or upgrade to the new Exchange Server Subscription Edition (SE). Clients often ask us whether it is worth staying on-premises, and in most cases the answer is that the cloud offers better security, lower total cost, and far less administrative burden.
Understanding Exchange Online plans
Exchange Online is available either on its own or, more commonly, bundled inside a broader Microsoft 365 subscription. It helps to understand the main options, which Microsoft summarises on its Exchange plans and pricing page.
Exchange Online Plan 1 provides a 50 GB mailbox per user, plus archive storage, and covers standard business email, calendars, and contacts.
Exchange Online Plan 2 increases the mailbox to 100 GB and adds a large, expandable archive along with data loss prevention and hold features, which suit businesses with heavier compliance requirements.
Microsoft 365 Business Basic and Business Standard include Exchange Online alongside Teams, SharePoint, OneDrive, and (in Standard) the desktop Office applications. For most small businesses, one of these bundles offers the best value, because email rarely exists in isolation.
Choosing between them is less about the headline price and more about how your team actually works. A professional services firm that must retain correspondence for years has very different needs from a small retailer with a handful of shared mailboxes. We generally recommend mapping your requirements first, then selecting the plan, rather than the other way around.
Security comes as standard, but not everything is switched on
One of the biggest advantages of Exchange Online is that robust email security is built in. Every subscription includes Exchange Online Protection (EOP), which filters spam, blocks known malware, and provides baseline protection against phishing. Features such as zero-hour auto purge can even remove malicious messages that have already landed in a mailbox, as Microsoft explains in its anti-malware guidance.
For businesses that want stronger defences, Microsoft Defender for Office 365 adds Safe Links, which checks web addresses at the moment a user clicks them, and Safe Attachments, which opens attachments in a secure sandbox before they reach the inbox. Given that email is still the most common route for cyber attacks, these are well worth considering, and the National Cyber Security Centre offers helpful, vendor-neutral advice on defending against phishing that complements them.
The important point is that many of these protections need to be configured correctly to be effective. In our experience, a large proportion of small businesses are paying for security features they have never fully enabled. It is one of the most common gaps we find, and one of the easiest to close.
Getting the most from Exchange
Beyond email delivery and security, Exchange includes several features that small businesses frequently under-use:
Shared mailboxes allow a team to manage a common address, such as sales@ or support@, without paying for an additional licence.
Distribution groups let you email a whole department or team with a single, memorable address.
Retention and archiving policies help you keep the records you are legally required to keep, and dispose of those you are not, in line with UK GDPR expectations set out by the Information Commissioner’s Office.
Mobile device access ensures staff can work securely from their phones, with the option to wipe business data remotely if a device is lost.
Used well, these features remove a surprising amount of day-to-day friction. Used poorly, or not at all, they leave money on the table and gaps in your compliance.
Planning a migration
Most businesses come to Exchange Online in one of two ways: moving from an ageing on-premises Exchange Server, or migrating from another provider such as Google Workspace or a basic hosting package. Either way, a migration is best approached carefully, because email is business-critical and mistakes are highly visible.
A well-run migration involves auditing your existing mailboxes, planning the cut-over to avoid disruption, moving historic mail and calendar data across, and reconfiguring every device once the change is complete. Done properly, staff should notice very little beyond a smoother, more reliable service. We cover this in more detail on our Microsoft 365 migrations page.
Talk to help4IT about Microsoft Exchange
Microsoft Exchange is powerful, but it rewards businesses that set it up deliberately rather than accepting the defaults. From choosing the right plan and enabling the security features you are already paying for, through to planning a smooth migration, the details make a real difference to cost, reliability, and peace of mind.
At help4IT, we help small and medium-sized businesses across London, the South East, and the wider UK get the best from Microsoft Exchange and the broader Microsoft 365 platform, as part of our managed IT support services. Whether you are moving to the cloud for the first time, tightening up your email security, or simply want a second opinion on your current setup, we are happy to help.
If you would like to review your Exchange environment with an expert, we offer a free initial consultation to explain your options in plain English. Arrange a time to speak with us using our confidential online form.
0 Comments