I'm dealing with a scenario where we've opened a case in Purview eDiscovery and implemented a legal hold on several individuals. Given that legal cases can drag on for years, there's a concern that someone's email might reach its maximum capacity. I know I can export the mailbox to a PST, release the hold momentarily to delete old emails, then reapplied a new hold to avoid losing any data. However, I'm worried about importing that PST file back into Purview and ensuring it's searchable. I've also heard of third-party solutions for email archiving that might solve the issue, but I'm not sure if any integrate well with Purview for searchability. Is there a better tool or email archiving utility that works seamlessly with Purview?
3 Answers
Have you tried enabling In-Place Archiving and setting a retention policy? The archive should be searchable within Purview. Just a heads up, depending on your licensing, you might need to upgrade to a user license that includes Exchange Online Plan 2.
Consider using Aid4Mail. We use it for similar challenges and it handles PST exports really well. You can also browse Exchange Online mailboxes with it, although that has been a bit hit-or-miss for us. The PST handling is solid, though!
You might want to check out Emailvault.app. It creates a complete archive of your company's emails in a write-once-read-many format, allowing unlimited searches and exports. You can even grant access to outside counsel if needed. Let me know if you want a demo, as I’m one of the founders!
Yeah, we've got those features set up already. But some users cling to emailing large files instead of using OneDrive or SharePoint, which complicates things for us with those retention policies. It's a bit frustrating dealing with old habits!