Email provider Rackspace down after Security Breach.

I swear half the reason we have M365 today is because Microsoft got tired of taking the blame for people being piss poor administrators.

I think it's more about the revenue train 365 brings. As you said they traded people being poor admins of on-prem exchange to poor admins of M365 tenants. I have to imagine that M365 brings MS WAY MORE revenue than selling Exchange licenses and seats. Also gave them incentive to kill SBS around the same time. Win-win.
 
I think it's more about the revenue train 365 brings. As you said they traded people being poor admins of on-prem exchange to poor admins of M365 tenants. I have to imagine that M365 brings MS WAY MORE revenue than selling Exchange licenses and seats. Also gave them incentive to kill SBS around the same time. Win-win.
MS Exchange is licensed like MS SQL is... crazy expensive. The swap away from on premise Exchange to M365 for just Exchange alone was actually a net neutral exchange for anyone that wasn't living on SBS server. And I can tell you from the design of Azure and M365 in general... Microsoft doesn't care at all about small businesses. They did give us lower margin SKUs that are quite comparable to the cost of onpremise SBS + the labor to maintain it. And we got to charge less because we aren't spending buckets of time dealing with removing people from blacklists anymore. I do NOT miss manually managing spam and reputation scores for mail servers.

Now, if you're looking at the Office apps themselves? Those "doubled" in price to be in M365, but now it's also cost neutral there because MS cut the lifecycle of Office products starting with 2019.
 
Last edited:
I made SBS my "bread and butter" back in the day. I've been in this game since NT 3.5 and 4.0, I remember "Microsoft Back Office Server"...the great grand daddy of SBS, and I REALLY got into SBS when SBS2000 came out. Devoured books on it, met Harry Brelsford a few times (Harry was a big promoter of Small Business Servers, writing quite a few books on it, and hosting road shows for Microsoft).

We made big money on SBS, in addition to the servers ( back then, a good 5 to 8 grand on hardware), however the big thing was consulting, we turned on the features and taught clients how to use all those features!

As SBS faded, and Essentials came/went, and 365 came out, we dreaded this big loss of income. Dreaded going from nice thick steaks for dinner every night, to....eating ramen noodles every night. Initially with Microsofts first program for partners to resell 365, their margins were horrible, like...I know I'm forgetting details a lot, maybe 6 or 9% first year, and less than half that recurring. We actually got asked to go up and meeting the early 365 partner reps in Hartford CT, to give our feedback.

Fast forward a few years, and as Rob notes above, there really is "so much to learn" in 365. I see so many people, including tech people, that think 365 is "just email". There really is a whole suite of services that all compliment each other. But my main point here is....there's a lot for us IT people to manage here. I was relieved at decommissioning on prem servers, but the mistake is to think 365 is less time consuming. Sure..no more worries about hardware failures of on prem servers, and no having to get up extra early or stay awake extra late to do those monthly updates and reboots and checking things. No worries about having to do restores from back up of a server. (granted...Datto made that SO easy). But we have so much to manage now. Security being one of them, MFA, and there's a lot of hand holding to go on here.

So long story short, I've mentioned this a few times in other threads, we still have a line item in our monthlies for our MSP clients, used to be for an on prem server, now we're going for that same price each month for "365 tenant management". Because we're in there often checking things. And..we're adding a 365 management tool soon, it ain't cheap. But it makes management of many 365 tenants easier for us, and helps push out templates to make sure clients tenants have all the proper settings dialed up for security 'n such.

Also, I encourage anyone here to REALLY set your standard to have clients on M365 Business Premium at a minimum. The added security features of Defender (previously called ATP...Advanced Threat Protection) are really needed. The benefits of "conditional access" are so worth having Azure P1. And the ability to have so many things "automated" via MEM/InTune are...SO worth it. It REALLY cuts down on YOUR time setting things up and managing the client. Thus...big savings in money. And big savings in your time spent. Making the client more profitable for you too if they're on a fixed monthly. The small cost per license over 365 Standard is easily repaid multiple times for both sides.
 
A day late!

Rackspace should only BLAME themselves for not having good Biz Continuity DR for their servers. If an IT firm is blaming ransomware or other malware for "taking them down"...they shouldn't have been playing the game in the first place...failed to get a good system in place.
Mostly agree with the rare exception being hit by something new an exploiting new vulnerabilities that are not really known yet.
 
Mostly agree with the rare exception being hit by something new an exploiting new vulnerabilities that are not really known yet.

But even that should not be relevant if they have the appropriate and necessary backup and recovery protocols required in a professional data center in place. To me, the big problem here is that they don't seem to have had any backup and recovery protocol whatsoever. This would all be over now (it would have been over pretty shortly) if they had.
 
Mostly agree with the rare exception being hit by something new an exploiting new vulnerabilities that are not really known yet.
IMO, *patching systems, and *having a good biz continuity DR system in place....so when you do get hit, you can roll back quickly/easily. A good system in place can expect the unexpected. Many threats are zero-day, exploiting vulnerabilities. Their exchange servers were exposed to an exploit that was announced in Sept..and the patch released first days of Nov. They never patched against it.
 
IMO, *patching systems, and *having a good biz continuity DR system in place....so when you do get hit, you can roll back quickly/easily. A good system in place can expect the unexpected. Many threats are zero-day, exploiting vulnerabilities. Their exchange servers were exposed to an exploit that was announced in Sept..and the patch released first days of Nov. They never patched against it.
I agree with @YeOldeStonecat here. It was a widely publicised vulnerability and they had a month to patch it and they chose not to. Maybe they do have backups, who knows at this point, all that is clear is that they dont seem in any rush to restore the services.
 
Mostly agree with the rare exception being hit by something new an exploiting new vulnerabilities that are not really known yet.
A proper backup system / disaster recovery plan protects against "almost all" of any type of 0 day stuff like this.

A proper backup is offline, and offsite.


Fully secure / fully disaster proof just isn't a thing in this world. But they didn't even come close to having anything respectable in place. Redundancy.

I'm sure they were aware of what went on when the oil pipelines got hit with ransomware. Did that not set off any lightbulbs over at Rackspace... "gee... I wonder if our plan would have kept us out of the hot water the oil pipelines are in now"......
 
And I can tell you this, it's really got me sold on the idea of layered protection.

No single solution is safe. If you don't have at least two, your playing with fire. How much risk can you tolerate? How well do you understand the risks?
 
Security, of which backup and recovery are but one part, has always been about layers.

For mission critical data in business, as far as backup & recovery goes, if you don't have the original, an on-site backup (for the sake of speed and convenience in most typical circumstances), and a backup of the backup off-site, you're not sufficiently protected. You could also have a separate backup offsite rather than backing up the local backup offsite - same difference.

For home users, just having any single backup in addition to the original is generally enough, and sadly often doesn't even happen. But for business two additional copies, at least one of which is not in the same physical location as the original, is essential.
 
I spoke with DropSuite today.

$4 a month, per seat.... to back up the entire tenant. An additional $1 per month to beef up the email backup to the point of adding in all the necessary stuff that would be required in a HIPPA setting, and what sounds like would be very useful in a law suite scenario.


Sounds like a no brainer to me.

If they refuse, I'll set up the Synology 365 backup tools on their Synology NAS and call it good. One way or another, they need two layers. I will be mentioning to them about the Synology route... "after" they decide if they are going to go for DropSuite or not. IMO it's the superior solution. It's all a matter of if they go for it or not.
 
@brandonkick Or you get an account with Pax8 and take $1 / month off both of those numbers and buy through them.

@britechguy That's why I push home users into the M365 Home plans. Onedrive isn't perfect, but it is versioned and it's more than enough to cover these levels of redundancy without people having to muck with drives they're going to damage or forget about. Still, the solution isn't perfect, because nothing ever is.
 
A day late!

Rackspace should only BLAME themselves for not having good Biz Continuity DR for their servers. If an IT firm is blaming ransomware or other malware for "taking them down"...they shouldn't have been playing the game in the first place...failed to get a good system in place.

At this point I think this is on purpose. They intentionally let this bit of business die as they're now giving away M365 to get people to move. They're pulling a Godaddy, just being less than honest about it. They don't want to be managing Exchange servers anymore, and they've shown they lack the talent to do so anyway.
 
The client i do some work for that is affected by this is a franchise and the national office who look after the email provided by Rackspace have, for some unknown reason switched them to what i assume is the business email provided by rackspace, they didnt even follow the guidance to switch to M365 and given that rackspace failed them so hard by turning off their exchange servers, they've gone for an even worse product with them!
My local franchise asked me for a quote to migrate them to M365, i had to explain that because the whole country uses the same domain it wouldnt be possible without switching everyone (keeping things simple!) and working with national office. This franchise do have their own M365 account which i do manage and is bought direct from Microsoft with their own domain and where they use sharepoint and teams, they dont actually use the email part of this account due to it being a different domain.

Its frustrating to see this happen when i could help the whole franchise network, but from my experience with that national office, it shouldnt actually surprise me how they "solved" this issue. As they setup "temporary" user names for each mailbox i think they are hoping exchange will be back and they just have to switch back the mx records.
 
@alexsmith2709 Most of the franchises I work with use Google for everything, pairing that up with a locally owned M365 tenant that provides the Office Applications, or even a full M365 license to get Teams and whatnot on their own domain, while the local Outlooks are actually aimed at a Gmail isn't uncommon.

So you could help your local franchises do all of that, and have email running on an "unofficial" domain for emergency use. Though it is tricky here... because diluting the trademark is a very bad thing for many reasons.
 
Back
Top