Forum Discussion
Journaling in O365
Although supported in Office 365, Journaling is a legacy feature typically used to capture messages from the transport pipeline and deliver them to an archiving system or service. In Office 365, you can journal messages to an SMTP address, typically an on-premises mailbox or a third-party archiving service. You cannot select an Office 365 mailbox as the journaling (target) mailbox.
The recommended archiving solution is to preserve message in-place using In-Place Hold or Litigation Hold. In Exchange Online, this preserves messages in the user's primary mailbox and archive. See https://technet.microsoft.com/en-us/library/dn790612.aspx for more info.
If you use unified hold from the Security and Compliance Center, you can preserve data across Exchange Online, SharePoint Online (including OneDrive for Business files) and Skype for Business. Recently announced functionality also allows you to capture social media content from Facebook, LinkedIn and Twitter in Office 365. All archived data is available for https://support.office.com/en-us/article/eDiscovery-in-Office-365-143b3ab8-8cb0-4036-a5fc-6536d837bfce.
Journaling is available, but you cannot use an O365 mailbox for the target. Any O365 mailbox. The documentation is here: https://technet.microsoft.com/en-us/library/jj898487(v=exchg.150).aspx
Litigation/In-place hold is the preferred method, but it always depends on the requirements.
Thanks Vasil,
I gather by your response that there is no newer update than from Feb 2015?
Is there any "in place" solution to capture all sent / received emails in O365 to use eDiscovery tools on that is in the Security & Compliance portal?
Does the indefinite hold work the same as journaling?
Is the only way to journal with O365 is to pay yet another vendor like Symantec for EV.Cloud, or mimecast?
Although supported in Office 365, Journaling is a legacy feature typically used to capture messages from the transport pipeline and deliver them to an archiving system or service. In Office 365, you can journal messages to an SMTP address, typically an on-premises mailbox or a third-party archiving service. You cannot select an Office 365 mailbox as the journaling (target) mailbox.
The recommended archiving solution is to preserve message in-place using In-Place Hold or Litigation Hold. In Exchange Online, this preserves messages in the user's primary mailbox and archive. See https://technet.microsoft.com/en-us/library/dn790612.aspx for more info.
If you use unified hold from the Security and Compliance Center, you can preserve data across Exchange Online, SharePoint Online (including OneDrive for Business files) and Skype for Business. Recently announced functionality also allows you to capture social media content from Facebook, LinkedIn and Twitter in Office 365. All archived data is available for https://support.office.com/en-us/article/eDiscovery-in-Office-365-143b3ab8-8cb0-4036-a5fc-6536d837bfce.
Hi there,
I have a continuing question to this. So I guess we don't have to talk about that selecting an OnPrem mailbox is no option. Microsoft is enforcing the companies so vehemently to migrate to O365 that all customers believe that they will have all solutions out-of-the-box. For sure they are planning to deprovision their OnPrem services one by one.So the only option is a third party service or the legal hold. From my experience a lot of companies have a high auditing acceptability with journaling and a secure (items cannot be deleted by user) archive.
Can I achieve that with the in-place / litigation hold? For a good reason there is the requirement that a user cannot delete emails from the very first second, maybe in his view, but not in the backend.
That would mean after creating a user and assigning the required licenses I would set the in-place hold immediately. What about storage consumption?
Thanks for your help.
Kind regards,
Christian- cfiessinger
Microsoft
Not sure about your exact scenario and use case, but have you see this recent third party assessment for Exchange online: Use Exchange Online and the Security & Compliance Center to comply with SEC Rule 17a-4
You can use either in-place or litigation holds to retain all emails according to a number of different criteria including to/from a particular user. Not quite the same as journalling of course but depending on your requirements, it may be sufficient.
