Moving files into SharePoint Online is not, by itself, proof of a successful migration. Documents may transfer without error while employees still struggle to identify approved versions, manage access, or complete processes that depend on systems and links left behind.
Even an excellent transfer report can mask persistent weaknesses in information quality, permissions, ownership, and governance. SharePoint migration readiness means fixing these issues during planning, before migration activities begin.
| CORE MIGRATION RULE
Address inherited problems before cutover: correct them, apply appropriate governance, or explicitly document and approve the remaining risk. |
The real opportunity is to establish a Microsoft 365 environment in which information is easier to locate, better protected, and simpler to maintain. For organizations looking to improve employee engagement and information discovery, SharePoint intranet modernization can build on this foundation by creating clearer navigation, more relevant content, and a consistent publishing experience. These improvements also enable effective collaboration, automation, records management, and responsible deployment of Microsoft 365 Copilot and AI agents.
A sound migration plan brings together four workstreams: agreeing on business results and ownership, examining and preparing the source, designing a governed destination, and proving readiness through pilot testing, phased migration, and outcome measurement. Working with an experienced Microsoft SharePoint consultant can help organizations evaluate these areas, identify risks early, and align technical decisions with business objectives. The sections below follow that order: business results first, source assessment and ownership next, destination design and governance, then pilot testing, waves, and measurement.
11 Critical Issues to Resolve Before SharePoint Migration
Review these 11 critical areas to identify content, security, governance, and technical issues early, reduce migration risks, and prepare your organization for a successful SharePoint migration.
1. Start With the Business Result, Not the Migration Tool
Before discussing software or transfer methods, establish what the business expects to improve and how those improvements will be demonstrated.
The motivations may include retiring file servers, replacing SharePoint Server, consolidating Microsoft 365 tenants, improving collaboration, lowering risk, or preparing reliable knowledge for Copilot. Each objective changes the solution design, migration order, and criteria for acceptance.
| PITFALL TO AVOID
Transferred file counts and terabytes confirm activity, not user or business success. Avoid treating those measures as the sole acceptance standard. |
Create a measurable scorecard during initiation, rather than waiting until discovery is complete. Any targets shown here are illustrative; organizations should set their own based on business priorities, compliance obligations, and current-state maturity.
Migration Outcome Scorecard Example
| Outcome | Baseline question | Illustrative target | How to validate |
| Findability | How long does it take a user to find the approved policy or project document? | Reduce median task time and improve successful first-search completion. | Task-based user testing and search analytics. |
| Ownership | How many sites, libraries, or content areas have no accountable owner? | Every migrated content area has an approved business owner and review cadence. | Signed migration inventory and owner attestation. |
| Security | How much access is direct, inherited incorrectly, or provided through stale links? | Reduce direct and item-level access exceptions; confirm least-privilege groups. | Permission reports and negative-access testing. |
| Process efficiency | How long do approvals or handoffs take today? | Shorten cycle time and reduce manual follow-up. | Workflow telemetry and business-owner acceptance. |
| Migration quality | How many high-severity defects occur after each wave? | Define a threshold that must be met before scaling the next wave. | Reconciliation report and hypercare log. |
Consider a policy repository containing 12,000 files. Its migration is successful only when staff can find the current approved policy, obsolete versions do not interfere with search, access is appropriate, and a designated owner manages future updates and publication.
2. Assess the Source Using Findings, Not Assumptions
The amount of stored data is only one factor in migration effort. A large, orderly repository may be straightforward to move, while a much smaller one with complex permissions, sensitive content, broken links, aging workflows, and custom integrations can demand substantial remediation.
Run technical scans, then turn the results into an inventory that business owners can use to make decisions. The Microsoft SharePoint Migration Tool (SPMT) supports SharePoint Server assessments; Migration Manager provides scan-only options and reporting for file shares. Review at least the following:
- All source locations, including sites, document libraries, folders, network shares, OneDrive accounts, and collaborative workspaces.
- Document totals, storage size, required version history, oversized files, and potential path-length limitations.
- Problematic file names, unsupported or blocked formats, checked-out items, encrypted content, and possible sync constraints.
- User and group access, guest accounts, individual grants, unique permission scopes, and existing sharing links.
- Information subject to confidentiality, regulatory retention, records rules, or legal holds.
- Dependent solutions such as workflows, forms, add-ins, web parts, scripts, macros, scheduled processes, APIs, and service identities.
- Embedded or fixed URLs in spreadsheets and templates, together with any connected applications that rely on those locations.
- Unused sites, neglected directories, repeated documents, and content whose ownership cannot be established.
| PLATFORM VALIDATION
SharePoint and OneDrive currently enforce a maximum decoded file-path length of 400 characters, including the folder path and file name. Individual files can be up to 250 GB. Confirm these limits during migration planning, as platform capabilities may change. Source: Microsoft, SharePoint limits. |
For every source area, document its purpose, destination, intended users, classification, responsible owner, dependencies, proposed treatment, acceptance reviewer, and outstanding risks. A thorough assessment of these factors helps organizations prepare for Microsoft SharePoint Migration Services by identifying content that needs cleanup, permissions that require review, and dependencies that must be resolved before migration. This inventory should drive decisions rather than serve only as a catalog.
An old modification or access date is a reason to investigate, not a reason to discard a file. Usage records may be incomplete, and older material can still be an enforceable agreement, a current policy, a necessary audit record, or regulated information.
3. Confirm Content Ownership Before Approving Migration
Every content area needs someone who can authorize what happens to it. Without a responsible business owner, it is difficult to choose between migration, restriction, redesign, retention, archiving, or approved disposal.
Make these responsibilities explicit:
- Business owner: confirms the content’s purpose, value, audience, and business acceptance.
- Technical owner: reviews technical dependencies, migration feasibility, and ongoing support requirements.
- Records or compliance owner: validates retention, legal holds, record classification, and lawful disposal rules.
- Migration validation owner: verifies the destination content, metadata, access model, and critical workflows before sign-off.
Where an owner cannot be identified, use a documented escalation process rather than automatically moving or deleting the material. The relevant business leader, legal team, records manager, or governance function should make and record the final decision.
4. Decide What to Keep, Improve, Archive, or Remove
Established repositories often accumulate superseded reports, folders belonging to former staff, repeated templates, interim exports, closed-project records, policy drafts, and several versions of the same final document.
Copying everything may feel conservative, but it adds cost and effort on top of search clutter, potential exposure, testing demands, and long-term administration.
| Decision | Required action |
| Migrate | Move active, valuable content with a confirmed owner, destination, permission model, and validation plan. |
| Remediate | Correct naming, paths, metadata, permissions, ownership, format, or technical dependencies before migration. |
| Archive | Preserve information that must be retained but is not required for day-to-day work; define where it will live and how it will be searched, accessed, and disposed. |
| Delete | Remove duplicate, temporary, or obsolete information only through an approved records and legal process. |
| Review | Escalate content with unresolved ownership, retention, legal, security, or business-value questions. |
Do not use document age as a deletion rule
Modification dates and last-accessed information can help teams decide what to review first, but neither can justify deletion on its own. Check applicable legal, contractual, regulatory, audit, operational, and records obligations before approving removal.
Establish the trusted version
People should know which document is the official reference after cutover. Identify the approved copy, its business owner, publication location, permitted editors, next review date, and the rules for handling drafts and superseded editions before migration.
| PRACTICAL TAKEAWAY
Removing duplicate content is not just a way to save storage. It also limits conflicting guidance, improves search results, and reduces the chance that users or AI tools will surface obsolete material. |
5. Design for Modern SharePoint Instead of Copying Legacy Structure
Rebuilding the old repository exactly as it was is appealing because users already recognize it. Unfortunately, doing so can carry its structural and governance problems into the new platform.
For instance, a nested path such as Department > Client > Project > Year > Document Type > File can lead to unwieldy navigation, long paths, complicated inheritance, and weaker findability when reproduced unchanged in SharePoint.
Choose destinations based on what the information is for, who needs it, how sensitive it is, how teams collaborate, and how long it needs to remain available:
- Store individuals’ working documents in OneDrive where that usage is appropriate.
- Use a SharePoint team site connected to Microsoft Teams for day-to-day group collaboration.
- Publish company policies, standards, and official guidance through a communication site or another managed publishing location.
- Separate substantial collections with distinct privacy, external access, retention, or ownership obligations into appropriate sites rather than relying on numerous item-level exceptions.
- Connect related sites with hubs and clear navigation instead of rebuilding a deeply nested subsite tree.
| INFORMATION ARCHITECTURE NOTE
Modern SharePoint uses a flatter structure of peer site collections linked through hub sites. It is easier to adjust than deep subsite trees with organizational structures built into their URLs. |
Keep the information architecture practical
Use sites and libraries with clearly defined purposes, short and meaningful folder structures, useful metadata and consistent content types where needed, accessible views, and straightforward navigation. Avoid replicating deeply nested folder structures exactly, as well as imposing unnecessary metadata requirements.
Only request metadata that supports an actual task, such as finding items by customer, project, approval status, document category, sensitivity, or review date. Make entry easier with defaults, templates, content types, and appropriate automation.
Account for each stage of the content lifecycle
Working drafts, formally published information, and historical records should not always have the same access, editing, approval, retention, or ownership rules. A policy might move from a restricted drafting area to an approval stage, then to a read-focused publication library, and finally into retention as an outdated but required record.
6. Resolve Excessive and Outdated Permissions Before Cutover
Access controls are frequently among the hardest migration issues to see early. Legacy repositories may contain grants to individual users, broken inheritance, inactive identities, temporary privileges, outdated groups, and sharing links with no remaining business justification.
The aim is to carry forward access that is still legitimate, not every historical permission setting. Build a simpler, reviewable model that minimizes unnecessary visibility.
- Where suitable, administer team-site membership through its Microsoft 365 group or associated Teams team.
- For communication sites and other sites without group connections, use the standard SharePoint Owners, Members, and Visitors groups.
- Use Microsoft Entra security groups when the same access population needs to be managed consistently across several sites.
- Limit direct grants and item-specific permissions to justified, documented exceptions with a named owner.
- Use distinct sites or libraries for sizeable content groups that require separate access boundaries.
- Examine guest access and all sharing-link types, including anyone links, organization-wide links, specific-people links, links without expiry, and sharing configured below the parent folder or site.
- Verify both sides of the model: intended users must be able to open information, and those without authorization must be blocked.
| SCALABILITY CAUTION
A SharePoint document library supports up to 50,000 unique permission scopes, but heavy use of exceptions degrades performance and manageability. A growing number of exceptions should trigger a design review, not become the goal. (Source: Microsoft SharePoint limits) |
Microsoft 365 Copilot works within the permissions already granted to each user; it does not independently grant access. The concern is that Copilot may help users find information that was already overshared or insufficiently controlled. Cleaning up permissions is therefore an important part of preparing content for AI, as well as a core security task.
7. Rework Legacy Workflows and Connected Solutions
A completed file transfer can still leave an organization with broken business processes. Identify dependencies on SharePoint Designer workflows, SharePoint Add-Ins, custom web parts, scripts, macros, fixed hyperlinks, service accounts, and older authentication methods.
| 2026 COMPATIBILITY ALERT
SharePoint 2013 workflows in SharePoint Online and the SharePoint Add-In model were retired on April 2, 2026. InfoPath Forms Services in SharePoint Online was removed after July 14, 2026. Plan replacement or redesign of dependent processes rather than assuming they can be transferred unchanged. Source: Microsoft 365 Message Center retirement announcements |
Keep the underlying business outcome, but do not assume every old implementation detail must be reproduced. Depending on the requirement, approvals and forms may be redesigned with Power Automate, Power Apps, Teams, supported APIs, or SharePoint Framework. Where custom functionality is necessary, SharePoint Development Services can help organizations rebuild legacy components using supported technologies while addressing integration requirements, maintainability, and security. Design for ownership, exceptions, logging, support, and auditability, not merely the standard execution path.
Maintain a dependency register for linked workbooks, documents, and applications. Include the original reference, destination reference, responsible owner, remediation approach, validation scenario, and planned cutover. Successfully copying a file does not prove that its formulas, macros, hyperlinks, or downstream consumers remain functional.
8. Put Governance in Place Before Users Go Live
Governance should be part of destination design, not an activity deferred until after cutover. Define each site’s purpose, audience, owner, security approach, sensitivity, lifecycle, review cycle, and support contact before people begin using it.
- Standards for requesting, creating, and naming SharePoint sites.
- Required site ownership and a recurring process for owners to confirm accountability.
- Rules for guest participation and sharing beyond the organization.
- Appropriate site, Microsoft 365 group, and Teams sensitivity labels where supported by policies and licenses.
- Retention controls and labels aligned with the organization’s approved records schedule.
- Processes to assess, archive, and retire inactive sites.
- Reporting that identifies excessive access and tracks correction activities.
- Documented support responsibilities, service expectations, and escalation routes.
For modern retention and records control, consider Microsoft Purview instead of depending on older SharePoint information-management mechanisms. If available through licensing, SharePoint Advanced Management can support inactive-site assessment, ownership reviews, attestations, and analysis of broad access or sharing.
| GOVERNANCE PRACTICE
Include governance rules in the target templates and migration acceptance process. A SharePoint site is not ready solely because its files are in place. |
9. Test a Realistic Pilot Before Scaling
The pilot needs to demonstrate that the future working model is usable and secure, not just that the migration tool copies data. Include representative sensitive files, metadata, complex access, large documents, dependent links, business workflows, guest scenarios, and different user roles.
Pilot acceptance and validation matrix
| Area | Validation question |
| Content | Are all in-scope files present, readable, complete, and reconciled to the source? |
| Versions and metadata | Are required versions, authorship, timestamps, content types, and properties accurate? |
| Permissions | Can authorized users access the content while unauthorized users and guests cannot? |
| Dependencies | Do critical links, workflows, forms, macros, and integrations function or have approved alternatives? |
| Search and navigation | Can representative users complete their top information-finding tasks? |
| Compliance | Are sensitivity, retention, record, and legal-hold requirements applied correctly? |
| Business acceptance | Has the accountable owner approved the destination and operating model? |
Document pilot problems by severity, root cause, accountable owner, and preventive action. Revise the runbook, mappings, user communications, and testing procedures before moving into the following wave. Pilot testing only creates value when the lessons change the delivery approach.
10. Plan Migration Waves and Cutover as Controlled Events
For large programs, phased delivery usually improves control and reduces disruption. Group content using business importance, risk, sensitivity, permissions, dependencies, user readiness, and destination readiness, rather than dividing waves solely by gigabytes.
- Clearly specified source locations and approved target destinations.
- Confirmed business accountability and a named person for migration acceptance.
- Recorded risks, dependencies, exception handling, and rollback decisions.
- A pre-stage or incremental-copy strategy when appropriate for the environment.
- The source read-only window and schedule for synchronizing final changes.
- User notices, enablement materials, training, and post-cutover support arrangements.
- A defined hypercare period with measurable criteria for closure.
The cutover procedure should make explicit when the old location becomes read-only and when the last changes are copied. It should also state when staff switches to the new location and how outstanding issues will be handled. Arranging Microsoft SharePoint Support during the cutover and hypercare periods can help teams troubleshoot access issues, resolve migration defects, and address user questions before they disrupt day-to-day operations. Without that discipline, employees may continue updating both sources, creating conflicting versions and uncertainty over which copy is authoritative.
| WAVE-READINESS LESSON
Begin the next wave only after validation is complete, major defects are fixed or formally accepted, support demand has stabilized, and prior lessons are reflected in the plan. |
11. Demonstrate the Business Improvements After Migration
Measure results after each wave and again once users have settled into the new environment. Compare them with the baseline and targets established at the beginning so technical completion can be evaluated against actual business improvement.
- Success rate and elapsed time for common searches for approved information.
- The amount of repeated, outdated, or unowned material eliminated or resolved.
- Changes in direct permissions, unique access scopes, and outdated sharing links.
- Time taken for approvals and the amount of manual chasing still required.
- User engagement, recurring support issues, and frequently repeated questions.
- The proportion of sites with a validated owner, sensitivity level, and lifecycle decision.
- Outstanding migration errors, reconciliation items, and unresolved technical dependencies.
Together, these measures show whether the migration has improved information access, protection, operational control, and day-to-day use, rather than simply changing the storage location.
SharePoint Migration: Pre-Cutover Readiness Checklist
- Business objectives, current baselines, intended targets, and validation methods have been agreed.
- The source inventory and remediation log provide enough evidence to support move decisions.
- Each in-scope content area has a responsible business owner and someone assigned to accept the result.
- Decisions on duplicate, outdated, ownerless, and authoritative files are recorded.
- The proposed site structure, information architecture, and content lifecycle have approval.
- Users, groups, guests, unique scopes, direct permissions, and sharing links have been assessed.
- Sensitive information has suitable storage, labeling, sharing, and authorization controls.
- Legacy processes, forms, add-ins, hyperlinks, and integrations have a confirmed remediation plan.
- Requirements for records, retention, legal holds, archiving, and disposal are documented.
- A representative pilot has satisfied technical validation and business acceptance.
- Communication, cutover, end-user training, support, hypercare, and rollback plans are prepared.
- Post-migration outcome reporting and recurring governance checkpoints are scheduled.
For the full step-by-step sequence, see our complete SharePoint migration checklist.
What Organizations Should Take Forward
Effective SharePoint migration begins with decisions made before data is transferred. Determine what information is still valuable, establish ownership, choose a suitable destination and access model, define governance requirements, and agree on the measures that will determine success.
With that preparation, organizations can achieve more than the retirement of a legacy file server. They can establish a dependable SharePoint Online foundation that improves discovery, reinforces information protection, supports collaboration and automation, and makes enterprise knowledge more suitable for responsible AI use.
| BEFORE YOU MOVE
Base every migration decision on verified evidence, accountable ownership, and measurable outcomes – not just an impressive transfer-completion rate. |
Have a question?
We’re here to help. Get in touch with us anytime, 24/7