7 days, 7am to 7pmVirginia DCJS licensed

Microsoft 365 Migration and GoDaddy Defederation for Northern Virginia Offices

Mailboxes, files and sign-ins moved on a written plan, with full admin control in your hands at the end.

Updated

A Microsoft 365 migration moves your email, files and accounts to Microsoft 365, or takes your tenant back from GoDaddy, without losing a single email.

Most moves start when a business outgrows a GoDaddy-bundled Microsoft 365, Google Workspace or an old Exchange server and suddenly needs Conditional Access, Intune, a new IT provider or a clean audit. DistrictConnects plans and runs the cutover from Herndon, schedules the disruptive parts after hours, and sets up security before the job is called done.

  • 100+DMV businesses supported
  • 60 minMicrosoft's upper limit to convert a federated domain to managed
  • 72 hrsUpper limit for moving licenses between Microsoft partners

What goes wrong in a rushed migration

Most migration problems come from the order things are done in, not from Microsoft. These are the failures we are usually called in to fix:

  • Unlicensed mailboxes. The old GoDaddy subscription was cancelled before new licenses were assigned, and mail stopped arriving.
  • Locked-out users. Passwords and MFA from GoDaddy do not carry over, and nobody planned the reset, so the whole office calls on Monday morning.
  • Lost admin control. No Global Administrator account belongs to the business, so even the fix needs GoDaddy or a former provider.
  • Broken mail flow. A wrong MX, Autodiscover, SPF, DKIM or DMARC record sends mail to junk folders or bounces it entirely.
  • Missed mailboxes and rules. Shared mailboxes, distribution lists, forwarding rules and room calendars get left behind because only user mailboxes were counted.
  • Silent equipment. Copiers, scanners and older apps that sent mail with a simple password stop working after cutover.

The rule that prevents most of this: cancel the old subscription last, only after new licenses are assigned, a Global Administrator you own works and every user can sign in on Microsoft’s own page.

What GoDaddy defederation actually changes

A federated domain trusts an outside provider, in this case GoDaddy, to check passwords. A managed domain lets Microsoft Entra ID check them directly.

  • Sign-in moves to Microsoft. We convert the domain with Microsoft Graph PowerShell in a planned window; Microsoft notes it can take up to 60 minutes.
  • You own the admin. A Global Administrator and backup admin belong to your business, and GoDaddy’s partner access and admin roles are removed.
  • Licenses move or get replaced. Partners can transfer new commerce subscriptions when both approve, up to 25 license line items per billing plan.
  • Your data stays put. The tenant, mailboxes, OneDrive, SharePoint and Teams history do not move, and your domain can stay registered at GoDaddy.

After the move we harden the tenant against CISA’s SCuBA baselines for Microsoft 365, and day-to-day care continues under managed Microsoft 365, Intune and email security.

What is included

  • Tenant audit before anything changes

    Every user, shared mailbox, distribution list, alias, forwarding rule, license and DNS record listed, plus who controls the Global Administrator role today and where your licenses are billed.

  • GoDaddy defederation

    Your own Global Administrator and a backup admin with MFA, replacement or transferred licenses, the domain converted from federated to managed sign-in, a password reset and MFA re-registration plan, and GoDaddy's partner relationship and admin roles removed.

  • Google Workspace to Microsoft 365

    All mailboxes, shared mailboxes and groups moved into Exchange Online, calendars and contacts preserved and checked, and Google Drive mapped into OneDrive and SharePoint, either folder for folder or into a cleaner new structure.

  • Exchange server and older Office moves

    Mail, calendars, public folders and accounts moved off on-premises Exchange or an aging file server, so the old box can finally be switched off.

  • DNS done right

    MX, Autodiscover, SPF, DKIM and DMARC planned and checked before cutover, with a rollback plan. Your domain can stay registered at GoDaddy or wherever it is now, and we work through delegated DNS access instead of shared passwords.

  • Security from day one

    MFA for everyone, separate admin accounts, Conditional Access, legacy sign-in blocked, and a baseline aligned with CISA's SCuBA guidance for Microsoft 365. A migration without this is only half finished.

  • Devices and older equipment

    Outlook profiles rebuilt, phones re-registered, and copiers, scanners and line-of-business apps that send email moved to a supported sending method, so the front desk scanner still works on Monday.

  • Support after cutover

    Day-one help in person or remotely, checks on shared calendars, room resources, aliases and permissions, and optional retention policies, mailbox auditing and ongoing management once you are settled.

How the work runs

  1. Discovery

    We inventory mailboxes, groups, forwarding rules, Drive or file shares, DNS and devices, confirm who owns the admin accounts, agree success criteria and pick a low-traffic cutover window.

  2. Secure control and licensing

    A Global Administrator you own, a backup admin, MFA on both, and replacement or transferred licenses assigned before anything is cancelled. Nothing is switched off first.

  3. Build the tenant

    Admin accounts, MFA and Conditional Access rules, Exchange, OneDrive, SharePoint and Teams foundations, and your security baseline, set up before users arrive.

  4. Stage the data

    Mail, calendars, contacts and files are copied in the background while your staff keep working, so the final cutover only has to move the last few days of changes.

  5. Cut over after hours

    DNS changes and the GoDaddy domain conversion happen in the planned window, usually an evening or weekend. We confirm mail flow, deliverability, calendars and mobile sign-in end to end.

  6. Validate and support

    Users are walked through sign-in and MFA, Outlook and phones are checked, legacy devices are tested, and only then is the old GoDaddy or Google subscription cancelled.

Platforms we work with

  • Microsoft 365
  • Google Workspace
  • Microsoft Intune

Industries we do this for

Related guides

Service area

On-site across Northern Virginia and DC.

Fairfax County

Loudoun County

Prince William

  • Manassas
  • Haymarket

Arlington and Alexandria

DC and Maryland

Common questions

What does it mean when our Microsoft 365 is federated with GoDaddy?

When GoDaddy sells Microsoft 365, it usually federates your email domain to GoDaddy. Sign-ins go to a GoDaddy page instead of Microsoft's, GoDaddy acts as the licensing partner, and your own administrators get limited access to the Microsoft 365 and Entra admin centers. That makes Conditional Access, Intune and a change of IT provider hard. Defederation converts the domain to standard Microsoft sign-in so you hold full control.

Will we lose email during the migration?

No, when it is planned properly. A GoDaddy defederation does not move mail at all: it changes how users sign in and who bills the licenses. The real risk is cancelling GoDaddy before replacement licenses are assigned, which can leave mailboxes unlicensed. For Google Workspace or Exchange moves, mail is copied ahead of time, DNS is checked in advance and mail flow is confirmed end to end after cutover.

How long does a Microsoft 365 migration take?

It depends on the complexity of the job: the number of users, how much mail and data moves, where it is coming from and how much security hardening is included. You get a written timeline with the quote. For a GoDaddy defederation the technical change is short: Microsoft says converting a domain can take up to 60 minutes to finish, and a partner-to-partner license transfer can take up to 72 hours. Most of the effort goes into the audit, staff communication and the password reset plan.

Do users need new passwords after leaving GoDaddy?

Yes, in most cases. While the domain is federated, GoDaddy checks passwords, so Microsoft does not hold a usable password for each account. After the domain is converted to managed, an administrator sets or resets a password for every user and each person registers MFA again. We plan this with you, send staff clear instructions and are available for the first morning of sign-ins.

Can our GoDaddy licenses be transferred to another provider?

Sometimes. Microsoft allows new commerce license-based subscriptions to move between Cloud Solution Provider partners when both the current and the new partner approve, at the original price. If that path is not available, we buy replacement licenses, assign them to every user and only then cancel the GoDaddy subscription. Either way, no mailbox is left without a license.

Do we have to move our domain away from GoDaddy too?

No. Your domain name can stay registered at GoDaddy after defederation. What matters is that the MX, Autodiscover, SPF, DKIM and DMARC records are correct and that your business controls the DNS account. Some businesses move DNS later for simpler management, but that is a separate decision and not part of the migration.

What happens to our Google Drive files, calendars and contacts?

Drive files move into OneDrive for personal files and SharePoint for shared folders. We can mirror your current folder structure or use the move to build a cleaner one with permissions set by group. Calendars, contacts, shared calendars and room resources are migrated and checked, including on phones, before the old Google subscription is cancelled.

How much does a Microsoft 365 migration cost?

It depends on the number of mailboxes and how much data they hold, where you are moving from, how many files and shared drives need restructuring, the devices and older equipment involved, and how much security hardening you want included. We do not publish prices. Send us your user count and current platform, and after a free assessment you get an itemized quote.