
Zero-Loss SharePoint Migration Runbook (2026)
The 32-step zero-loss SharePoint migration runbook for moving from SharePoint 2013/2016/2019 on-prem to SharePoint Online + Microsoft 365. Includes content audit, ROT removal, Information Architecture remap, Purview labels, Copilot readiness, cutover, validation.
The 32-step zero-loss SharePoint migration runbook for moving from SharePoint 2013/2016/2019 on-prem to SharePoint Online + Microsoft 365. Includes content audit, ROT removal, Information Architecture remap, Purview labels, Copilot readiness, cutover, validation.

The 32-step runbook EPC Group uses for SharePoint on-prem to SharePoint Online migrations. "Zero-loss" means: no content lost, no permission drift, no broken links from the user's perspective. Built from hundreds of Fortune 500 SharePoint migrations since 2003.
Scope. Covers SharePoint 2013/2016/2019 on-prem → SharePoint Online (M365) migrations. Adaptations noted for non-SharePoint source systems (Igloo, Jive, Confluence, custom CMS).
Zero-loss SharePoint migration requires: (1) full pre-migration content audit + ROT removal, (2) Information Architecture remap (don't lift-and-shift legacy IA), (3) phased migration with parallel-run validation, (4) Purview label deployment BEFORE Copilot-eligible content arrives, (5) URL preservation strategy (redirects + crawl), (6) 60-day hypercare with named EPC Group + client team.
Pre-Migration: Discovery + Design (Steps 1-10)
Step 1: Source System Inventory. Run SharePoint 2013/2016/2019 PowerShell Get-SPSite + Get-SPWebApplication for full topology. Capture: site counts, content database sizes, custom solutions (full-trust + sandboxed), workflows, content types.
Step 2: Content Audit + ROT Identification. Use ShareGate Insane Reports or SharePoint Migration Assessment Tool (SMAT). Identify Redundant + Outdated + Trivial content. Target: 30-60% reduction pre-migration.
Step 3: Permission Audit. Export full permission inheritance map. Identify orphaned permissions, broken inheritance, oversharing risks.
Step 4: Customization Audit. List all sandboxed solutions, full-trust solutions, custom workflows (SharePoint Designer + Nintex), branding (master pages + page layouts). Most customizations DO NOT migrate to SharePoint Online — must be re-platformed to SPFx + Power Automate.
Step 5: User + Group Mapping. Map on-prem Active Directory users to Entra ID identities. Resolve mismatches (renamed users, terminated users still referenced in permissions).
Step 6: Information Architecture Design. Don't lift-and-shift legacy IA. Design modern hub-based topology. EPC Group recommendation: 1 hub per business unit + topical hubs + cross-cutting policies.
Step 7: Site Provisioning Standards. Naming convention, URL pattern, default permissions, default sensitivity label, retention label.
Step 8: Branding + Page Templates. Modern SharePoint Online uses theme JSON + SPFx extensions + page templates. Migrate visual identity, not legacy master pages.
Step 9: Search + Findability Plan. Search verticals + result sources + refiners. Modern SharePoint Online search differs from on-prem Search Service Application.
Step 10: Governance + Copilot Readiness Plan. Purview sensitivity labels, retention labels, DLP, oversharing remediation runbook, Restricted SharePoint Search for sensitive content. Required BEFORE Microsoft 365 Copilot turn-on.
Migration Execution: Phased Rollout (Steps 11-22)
Step 11: Tooling Selection. ShareGate Migrate (most common), Microsoft Migration Manager + Mover (good for OneDrive + file shares), AvePoint FLY (high-customization environments). EPC Group reference: ShareGate for SharePoint, Migration Manager for OneDrive, FLY for complex Nintex workflows.
Step 12: Migration Environment Setup. Source connectivity, target tenant prep (sites pre-created, hubs configured, permissions seeded), migration tool licensing.
Step 13: Test Migration Wave. 10-50 sites + 5-25 users. Validate fidelity, performance, edge cases. Learn from this wave; do NOT skip.
Step 14: Test Wave Validation. Compare source vs target: content count, permission inheritance, customization rendering, user notification.
Step 15: Wave Planning. Group sites by business unit + dependency. Each wave 500-2,500 users + 100-500 sites. Pick non-conflicting workloads.
Step 16: Wave 1 Communications. 4-week heads-up + 1-week reminder + day-of cutover comms. Persona-tailored.
Step 17: Wave 1 Pre-Migration Snapshot. Source content + permission snapshot for rollback comparison.
Step 18: Wave 1 Migration Execution. Schedule outside business hours. Monitor migration tool dashboard. Pause + remediate failed items.
Step 19: Wave 1 Validation. Site-by-site walkthrough by named site owner. Sign-off required.
Step 20: Wave 1 Cutover. Source set to read-only, redirect to target, user notification.
Step 21: Wave 1 Hypercare. Named EPC Group + client team. 7-day intensive support. Top 5 issue categories triaged daily.
Step 22: Waves 2-N Iteration. Each subsequent wave benefits from learnings. Wave size can grow (500 → 1,500 → 2,500 → 5,000) as confidence builds.
Post-Migration: Validation + Hypercare (Steps 23-32)
Step 23: Full-Tenant Permission Audit. Compare source vs target permission state. Identify drift. Remediate orphaned permissions.
Step 24: Search + Crawl Validation. Confirm SharePoint Online search indexing complete. Modern Crawler should pick up new content within 24 hours.
Step 25: URL Preservation. Configure redirects for any legacy URL pattern users may have bookmarked. Audit external systems linking to legacy SharePoint.
Step 26: Purview Label Deployment. Apply container labels to all migrated sites. Autolabeling for regulated content. File-level labels propagate over 30-60 days.
Step 27: Copilot Readiness Validation. Oversharing audit + remediation. Restricted Search configuration. DLP for Copilot tested.
Step 28: User Adoption Coaching. Modern SharePoint Online UX differs from on-prem. Persona-based training, champion network, office hours.
Step 29: Custom Solution Re-Platform. SPFx replacements for legacy webparts. Power Automate flows replacing SharePoint Designer workflows. Document by-design changes.
Step 30: Source System Decommission. 90-day read-only retention before decommission. Snapshot + archive per retention policy.
Step 31: 60-Day Stabilization Review. Quantitative (search analytics, page analytics, Viva Insights) + qualitative (user surveys). Identify residual issues.
Step 32: Knowledge Transfer + Operational Handoff. EPC Group handoff to client IT operations team. Runbook for ongoing site provisioning, permission management, label maintenance.
| Capability | E5 + Copilot Add-on | M365 E7 |
|---|---|---|
| SharePoint Online | E5 included | E7 included |
| Microsoft Purview | E5 included | E7 included |
| Microsoft 365 Copilot | Add-on $30/user/mo | Bundled |
| Microsoft Agent 365 | Add-on $45/user/mo | Bundled |
| Per user/month | $90+ | $99 ($84.15 CSP promo through Dec 31 2026) |
EPC Group recommendation: lock in M365 E7 + CSP promo for post-migration period (Copilot adoption + Agent 365 governance becomes operational).
Zero-loss SharePoint migration is achievable with disciplined execution across 32 documented steps. Skipping pre-migration audit, IA redesign, or post-migration governance produces measurable adoption + compliance failures. EPC Group has executed this runbook on hundreds of Fortune 500 environments since 2003.
Q: How long does a SharePoint migration take?
A: 6-18 months for enterprise (10,000+ users), 3-9 months for mid-market, 2-4 months for small. Multi-geography or regulated industries add 30-50%.
Q: How much does a SharePoint migration cost?
A: Tooling: $50K-$200K per environment (ShareGate, FLY, etc). Consulting: $200K-$1.5M depending on scope. Internal IT time: 1-3 FTEs full-time. Total: $300K-$3M+ for enterprise.
Q: Can we do this in-house?
A: Yes, with experienced SharePoint architects. Most clients combine internal team + EPC Group oversight + complex-customization specialists.
Q: What about Microsoft Teams content?
A: Teams content lives in SharePoint sites (each team = a site). Migrating SharePoint migrates Teams files. Teams chat history migrates separately.
Q: What about OneDrive for Business content?
A: Microsoft Migration Manager + Mover is the standard tool. Less complex than SharePoint sites.
Q: How do we minimize user downtime?
A: Weekend cutovers + read-only source + user comms 4 weeks out. Most users experience zero downtime; power users + admins experience minimal.
Q: Why EPC Group?
A: 29 years SharePoint consulting (since SharePoint 2003 beta team). Hundreds of Fortune 500 migrations. Microsoft Press author. See /reviews.
CEO & Chief AI Architect
Microsoft Press bestselling author with 29 years of enterprise consulting experience.
View Full ProfileMid-market enterprises are forced to choose between premium-priced senior consulting and offshored junior delivery. EPC Group's Mid-Market Microsoft Fixed-Fee Catalog ends that false choice — 15 fixed-scope, fixed-fee packages across 5 service families. Senior architects only.
Microsoft 365Microsoft 365 Backup is now generally available. EPC Group enterprise operationalization guide: scope (Exchange / SharePoint / OneDrive / Teams), recovery patterns, HIPAA + FINRA + FedRAMP overlays, comparison vs Veeam + AvePoint + Druva.
Microsoft 365The most-cited topic in 2026 SharePoint consulting: governance frameworks. EPC Group ships a 12-domain reference that goes deeper than competitor blogs (Beyond Intranet, ShareGate, GetSharePoint). From hundreds of Fortune 500 governance engagements since SharePoint 2003.
Our team of experts can help you implement enterprise-grade microsoft 365 solutions tailored to your organization's needs.