In Exchange Online and Exchange Server 2013, you can use In-Place Hold or Litigation Hold to preserve mailbox content for litigation or investigations. Many organizations also need to preserve mailbox data for users who are no longer in the organization.
In on-premises Exchange deployments, this has typically been done by disabling the Active Directory user account and performing actions such as removing it from distribution groups, preventing inbound/outbound email to and from the mailbox (including setting delivery restrictions and configuring message size limits), hiding the mailbox from the Global Address List (GAL), and also setting an account expiration date on the user account in Active Direcory. Licensing costs are not a concern in this scenario, because you do not need a Client Access License (CAL) for a mailbox that’s no longer active.
In Exchange Online, admins remove mailboxes for departed users. However, once you remove a mailbox, it can no longer be included in In-Place eDiscovey searches (Multi-Mailbox Search in the previous version of the service and in Exchange 2010). Additionally, 30 days after you remove a mailbox, it is permanently deleted from Exchange Online and can no longer be recovered. In-Place eDiscovery requires that the mailbox be active, which means an Exchange Online or Office 365 plan is required for the mailbox for as long as you want to preserve data for eDiscovery.
Note: You can preserve mailbox data offline by exporting it to a PST file using Microsoft Outlook and then remove the mailbox. However, if you need to perform an eDiscovery search, you would need to inject it back to an Exchange Online mailbox.
In the new Exchange Online, we’ve introduced the concept of inactive mailboxes to handle departed users. When a user leaves the organization and you need to retain their mailbox data for some time to facilitate eDiscovery (or meet retention or business requirements), you can place the mailbox on In-Place Hold or Litigation Hold before removing the Office 365 user. This preserves the mailbox, but prevents it from sending/receiving messages, hides it from users so it's no longer visible in the GAL and other recipient lists. You can add inactive mailboxes to In-Place eDiscovery searches. Inactive mailboxes do not require an Exchange Online or Office 365 plan.
When your eDiscovery, retention or other business requirements are met and you no longer need to preserve the mailbox content, you can remove the mailbox from In-Place Holds or Litigation Hold. After you remove hold, the normal mailbox removal behavior of Exchange Online will resume for the mailbox - which means, if the mailbox was removed more than 30 days ago, it will be permanently deleted. If it was removed less than 30 days ago, it will be permanently deleted after 30 days of removal.
Inactive mailboxes are available in March 2013 in the E3, E4, E5, A3, A4, G and Exchange Online P2 plans.
If you already have inactive mailboxes in your on-premises Exchange 2010 or Exchange 2013 environment or a third-party archive, you can move the data to inactive mailboxes in Exchange Online by first provisioning an Exchange Online mailbox, which requires a plan subscription, importing the data to the Exchange Online mailbox, placing the user on In-Place Hold or Litigation Hold and then deleting the user account, making it an inactive mailbox. You do not require a plan subscription for that mailbox after you make it inactive. However, you will need a subscription during the provisioning and data import process. If you have a large number of inactive mailboxes, you can provision them in batches using a smaller number of subscriptions. Note, the Product Usage Rights (PUR) states that licenses can only be reassigned once every 90 days.
You can preserve data in inactive mailboxes for as long as you need to, based on your organization's retention and eDiscovery requirements. Of course, you would need to continue to be an Office 365/Exchange Online customer.
When you place a mailbox on hold in Exchange, you're actually placing the user on hold. Both primary and archive mailboxes are placed on hold, and become inactive after you remove the Office 365 user. When you use Office 365's eDiscovery tools to search the (now inactive) user, both mailboxes are searched.
If you've specified a hold duration using In-Place Hold or Litigation Hold, items older than the hold duration are removed when the Managed Folder Assistant (MFA) processes the mailbox.
Yes. Inactive mailboxes are visible to Office 365 eDiscovery tools - In-Place eDiscovery in Exchange Online, the eDiscovery Center in SharePoint Online, and eDiscovery or Content Search in the Office 365 Security and Compliance Center (SCC). No additional licenses are required to include inactive mailboxes in eDiscovery searches.
As noted in Inactive mailboxes in Exchange Online and elsewhere in Exchange Online documentation:
On July 1, 2017, you'll no longer be able to create In-Place Holds in Exchange Online (in Office 365 and Exchange Online standalone plans). You'll still be able to modify existing In-Place Holds, and creating new In-Place Holds in Exchange Server 2013 and Exchange hybrid deployments will still be supported. And, you'll still be able to place mailboxes on Litigation Hold. As an alternative to using In-Place Holds, you can use eDiscovery cases or retention policies in the Office 365 Security & Compliance Center.
To make a mailbox inactive, you can use Litigation Hold, eDiscovery cases or Retention Policies in Office 365.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.