Exchange2013 Global Mail Query (in-place display and hold)

When it comes to using Exchange2013, there is a long time, the company in use, to help other enterprises are also in the deployment, but some of the usual features of less contact, the general daily use will not be used, unless under certain conditions and requirements, we will find that these ordinary features are rarely used or quite to the force! Today to share a special feature of Exchange2013, called "in-place electronic data display and retention"!

"In-place ediscovery and retention" light look at this name, I believe many of the friends who used the Exchange2013 console are the same as my initial feeling, wtf! What is this stuff? Looking at several other feature tabs in the same category, such as, is a bit unintelligible. However, it can literally be understood primarily as the control of email audits and retention.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m01/6b/7a/wkiol1uvl9ft3fgoaaegc3gql84039.jpg "height=" 326 "/>

All the features I will be in the future of the article to introduce and functional display, today, first of all, "in-situ electronic data display and retention"

The text is really complex, I directly to everyone translated into the most popular words, so we will feel that this function is sometimes really practical, the main function of this function is:

Global e-mail record query!!!

Believe translated into these words, everyone on the concept of this function is generally clear some, and in the enterprise audit and security mechanism more strict company, this function is more practical.

When it comes to email records, we think of a lot of third-party mail system archiving equipment, Simon, Barracuda, etc...

These third-party special purpose equipment features must be comprehensive, simple operation, but the general price is expensive, many enterprises will be at a distance.

In this article, we'll talk about how to use the native functionality of exchange for global search and query of enterprise mail systems.

1. First of all, we have to do is to add permissions, the default Enterprise all users, including enterprise Administrators or Exchange administrators do not have the "Mailbox search role" Permissions , So we're going to add to the Discovery management This group of users who will need to be able to search for message records in AD.

For authorized users who perform an in-place ediscovery search, you must add them to the Discovery Management role Group. This role group consists of the following two management roles: the mailbox search role , which enables the user to perform an in-place ediscovery search, and the legal hold role that enables the user to place the mailbox in an in-place hold or litigation hold.

By default, no users or Exchange administrators are assigned the permissions required to perform tasks related to in-place ediscovery. An Exchange administrator who is a member of the organization Management Role group can add users to the Discovery Management Role group and can create custom role groups that limit the discovery Administrator's scope to a subset of users.

Let's take a look at Microsoft's official explanation https://technet.microsoft.com/zh-cn/library/dd298021 (v=exchg.150). Aspx#roles

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m02/6b/7e/wkiom1uvloqdhxjbaahkanixhng179.jpg "height=" 395 "/>

2. Then open the Exchange 2013 Management Console ECP, select Compliance Management-in-place ediscovery and hold, and create a new search with the "+" button

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6B/7E/wKiom1UvLpGB5swZAAEz1ZqFwPY189.jpg "height=" 427 "/>

3. Fill in a Search name and click Next

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6B/7A/wKioL1UvL-3CetBzAAFk9Zg6BTw128.jpg "height=" 416 "/>

4. Select the target users we want to query search, can be all mailboxes, can be an individual, can also be a group, here according to the needs of their own choice, I here to "Zhang four" individuals as an example.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6B/7A/wKioL1UvL_PyO1HiAACk80_58fg791.jpg "height=" 433 "/>

5. In the Search query criteria Filter tab, we can query all the message content, or based on the criteria filter.

We can see many filters, including keywords, time, recipients, senders, message types, and so on.

Select On Demand.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6B/7A/wKioL1UvL_vzyWAOAAD3KKv5aoY986.jpg "height=" 484 "/>

6. Select the in-place hold setting, which is related to "retention policy", we can choose the time of retention, can be set manually.

I choose to keep it indefinitely. Finally click "Finish".

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m02/6b/7e/wkiom1uvlq6bi3dnaaehai4tgie862.jpg "height=" 355 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m00/6b/7a/wkiol1uvmanrv6lxaacj31g9ov4270.jpg "height=" 328 "/>

7. Once the settings are complete, the system will automatically first estimate all message content for the target object that meets the filter criteria.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m02/6b/7e/wkiom1uvlrzwfjrtaafa0b1x-t0464.jpg "height=" 424 "/>

8. Or manually estimate the search results yourself.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6B/7E/wKiom1UvLsOhuqAzAAENiXqO9xo467.jpg "height=" 342 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6B/7E/wKiom1UvLsrSFIsAAACEr4afcNs737.jpg "height=" 282 "/>

9. After estimating the search results, select Preview search results.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6B/7A/wKioL1UvMCXxcJ09AAEh8oNv5Jc958.jpg "height=" 318 "/>

10. The system will show the results of our search, including received and sent messages, so as to achieve our query and audit the purpose of the mail

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6B/7A/wKioL1UvMCyxXNDCAAEFBxq9IM8793.jpg "height=" 319 "/>

11. In addition to the above-mentioned web version of the direct view of the method, we can also download the query results in PST format to be viewed locally.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6B/7A/wKioL1UvMDOxB_STAAEA84QsONk988.jpg "height=" 404 "/>

12. If we want to delete this search, there will usually be an error message that there is at least one user's mailbox is still on hold, we must close the mailbox reservation before we can continue to delete the task

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6B/7A/wKioL1UvMDvClz3cAAD3ExwRJRM676.jpg "height=" 395 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6B/7E/wKiom1UvLu6gFK9tAABpoUWi1ko432.jpg "height=" 279 "/>

13. Remove the option box where the content is placed on hold and the search can be deleted directly.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6B/7A/wKioL1UvMEmytLV7AADD50kGT_4929.jpg "height=" 297 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6B/7E/wKiom1UvLvzTWAxZAADXtR78Cdw297.jpg "height=" 457 "/>

14. We may also authorize some special people and departments according to the way of step 1, such as audit department, personnel department users. These authorized users will also be able to login via ECP, although the management function is much less,

However, there is no problem with using the local electronic data display and retention functions.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6B/7F/wKiom1UvLwOhdb6uAAEMc4ifbZ0483.jpg "height=" 337 "/>

This article is from the "June Ma Run Space" blog, be sure to keep this source http://horse87.blog.51cto.com/2633686/1633326

Exchange2013 Global Mail Query (in-place display and hold)