Microsoft cloud
Exchange Online
Exchange Online is Microsoft's cloud-hosted email, calendaring, and contacts service, delivered as part of Microsoft 365 and functioning as the direct cloud successor to on-premises Microsoft Exchange Server, which organisations previously had to install, patch, and maintain their own infrastructure to run.
Why Exchange Online matters in a Microsoft estate
Exchange Online matters because Microsoft 365, Azure, Windows 365, Teams, and related services are usually managed as one estate. The term connects to planning, cost, configuration, security, and day-two operational decisions across that estate.
How Exchange Online shows up in practice
It provides each licensed user with a mailbox accessible through Outlook desktop, Outlook on the web, and mobile clients, along with shared mailboxes, resource mailboxes for rooms and equipment, and distribution groups. Administration happens through the Exchange Admin Center and the PowerShell-based Exchange Online Management module, used to configure mail flow rules, retention policies, and mailbox permissions. Mailbox storage is licence-tier dependent, with most Microsoft 365 business and enterprise SKUs including 50GB or 100GB mailboxes and unlimited or very large archive storage on higher tiers. Understanding which tier a user is on materially affects both what they can store and what compliance and retention capabilities are available to their mailbox, since features like litigation hold, in-place archiving, and advanced eDiscovery are gated by licence tier rather than universally available.
Mail flow and security sit on top of the base mailbox service through Exchange Online Protection, which handles anti-spam and anti-malware filtering for all inbound and outbound mail by default. Microsoft Defender for Office 365 is available as a licensed add-on, or included at higher M365 tiers, to add safe links, safe attachments, and anti-phishing capabilities that go materially beyond the baseline filtering. A recurring operational and compliance blind spot in mature estates is shared and resource mailbox sprawl. Because these mailboxes traditionally did not require a full user licence to create, organisations accumulate large numbers of them for departments, projects, and equipment bookings.
Without active review they persist indefinitely, some inactive for years, each one still representing both a storage cost once it exceeds the free-tier size threshold and an access-control surface with permissions that were granted for a project long since finished. Exchange Online's connection to broader Microsoft 365 governance is deep rather than incidental: Microsoft Teams chat and channel data, Microsoft 365 Groups, and Outlook calendar all rely on Exchange Online infrastructure underneath their respective front ends. This means mailbox-level retention and compliance policies configured in Exchange Online frequently have downstream effects on data retention in services that do not visibly present themselves as email at all. This is a common source of confusion when compliance requirements are being mapped against what looks, from the admin centre, like a single self-contained service.